CVE-2018-17972: Race Condition
An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel . An attacker with a local account can trick the stack unwinder code to leak stack contents to userspace. The fix allows only root may inspect the kernel stack of an arbitrary task.
Upstream patch:
https://marc.info/?l=linux-fsdevel&m=153806242024956&w=2
Other sources
An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 4.18.11 - Compensating control
Upgrade/patch the Linux kernel so that the kernel stack inspection via proc_pid_stack permits only root; this prevents a local attacker from exploiting racy stack unwinding to leak kernel task stack contents to userspace.
Event History
Frequently Asked Questions
What is the severity of CVE-2018-17972?
CVE-2018-17972 is rated as medium severity, allowing local attackers to leak sensitive stack information.
How do I fix CVE-2018-17972?
To fix CVE-2018-17972, update the Linux kernel to a version that includes the patch addressing this vulnerability.
Who is affected by CVE-2018-17972?
CVE-2018-17972 affects various Linux distributions including specific versions of Ubuntu, Red Hat, and Debian.
What systems are specifically impacted by CVE-2018-17972?
Systems running Linux kernel versions up to 4.18.11 and certain Ubuntu, Red Hat, and Debian releases are impacted by CVE-2018-17972.
What type of attack does CVE-2018-17972 enable?
CVE-2018-17972 enables local attackers to potentially leak kernel stack contents, which can lead to sensitive data exposure.