CVE-2018-19854: Infoleak
An issue was discovered in the Linux kernel before 4.19.3. cryptoreportone() and related functions in crypto/cryptouser.c (the crypto user configuration API) do not fully initialize structures that are copied to userspace, potentially leaking sensitive memory to user programs. NOTE: this is a CVE-2013-2547 regression but with easier exploitability because the attacker does not need a capability (however, the system must have the CONFIGCRYPTOUSER kconfig option).
Other sources
An issue was discovered in the Linux kernel in the cryptoreportone() and related functions in the crypto/cryptouser.c (the crypto user configuration API) which do not fully initialize structures that are copied to userspace, potentially leaking sensitive kernel memory content to a userspace.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-147.rt24.93.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-147.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.19.3 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.19.3 - Compensating control
If not upgrading, ensure the system is not using the crypto user configuration API by not enabling the CONFIG_CRYPTO_USER kconfig option (the vulnerability requires CONFIG_CRYPTO_USER to be present).
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2018-19854?
CVE-2018-19854 has a medium severity rating due to potential information leakage in the Linux kernel.
How do I fix CVE-2018-19854?
To fix CVE-2018-19854, update to kernel version 4.19.3 or later for affected Linux distributions.
Which versions of the Linux kernel are affected by CVE-2018-19854?
CVE-2018-19854 affects the Linux kernel versions earlier than 4.19.3.
What type of leak is caused by CVE-2018-19854?
CVE-2018-19854 can lead to sensitive memory being leaked to user programs through uninitialized structures.
What software packages are affected by CVE-2018-19854?
CVE-2018-19854 affects various Linux kernel packages including those in Red Hat and Ubuntu distributions.