CVE-2018-14734: Use After Free
A flaw was found in Linux Kernel in the ucmaleavemulticast() function in drivers/infiniband/core/ucma.c which allows to access a certain data structure after freeing it in ucmaprocessjoin(). This allows an attacker to cause use-after-free bug and to induce kernel memory corruption, leading to a system crash or other unspecified impact.
References:
https://marc.info/?t=152787806300002&r=1&w=2
https://patchwork.kernel.org/patch/10444267/
An upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cb2595c1393b4a5211534e6f0a0fbad369e21ad8
Other sources
drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucmaleavemulticast to access a certain data structure after a cleanup step in ucmaprocessjoin, which allows attackers to cause a denial of service (use-after-free).
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.18 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.107-1Fixed in 7.1.12-1Fixed in 7.1.13-1 - Upgrade
Upgrade
linux kernel (drivers/infiniband/core/ucma.c)to a version that resolves this vulnerability.Fixed in 4.17.11Patch https://patchwork.kernel.org/patch/10444267/
Event History
Frequently Asked Questions
What is the severity of CVE-2018-14734?
CVE-2018-14734 is classified as a high severity vulnerability due to its potential to cause kernel memory corruption.
How do I fix CVE-2018-14734?
To fix CVE-2018-14734, update the Linux kernel to one of the patched versions specified by your distribution.
Which Linux distributions are affected by CVE-2018-14734?
CVE-2018-14734 affects multiple distributions including Red Hat, Debian, and Ubuntu.
What kind of vulnerability is CVE-2018-14734?
CVE-2018-14734 is a use-after-free vulnerability that allows attackers to access freed memory, potentially leading to system crashes or arbitrary code execution.
Is CVE-2018-14734 exploitable remotely?
Yes, CVE-2018-14734 can potentially be exploited remotely under certain conditions, allowing an attacker to affect the kernel.