CVE-2018-25020: High severity linux kernel vulnerability
Published Dec 8, 2021
·Updated
The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c.
Affected Software
18 affected components
Linux Linux kernel<4.17
NetApp Cloud Backup
NetApp H410c Firmware
NetApp H410c
NetApp H300s Firmware
NetApp H300s
NetApp H500s Firmware
NetApp H500s
NetApp H700s Firmware
NetApp H700s
NetApp H300e Firmware
NetApp H300e
NetApp H500e Firmware
NetApp H500e
NetApp H700e Firmware
NetApp H700e
NetApp H410s Firmware
NetApp H410s
Remediation
Event History
Dec 8, 2021
CVE Published
via MITRE·04:47 AM
Data Sourced
via MITRE·04:47 AM
Description
Frequently Asked Questions
1
What is CVE-2018-25020?
CVE-2018-25020 is a vulnerability in the BPF subsystem in the Linux kernel before 4.17.
2
How does CVE-2018-25020 affect Linux?
CVE-2018-25020 can lead to an overflow in the BPF subsystem in the Linux kernel before 4.17.
3
Which software versions are affected by CVE-2018-25020?
CVE-2018-25020 affects Linux kernel versions up to but not including 4.17.
4
What is the severity of CVE-2018-25020?
CVE-2018-25020 has a severity rating of 7.8 (high).
5
How can I fix CVE-2018-25020?
To fix CVE-2018-25020, update your Linux kernel version to 4.17 or higher.