CVE-2018-5333: Null Pointer Dereference
In the Linux kernel through 4.14.13, the rdscmsgatomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rdsatomicfreeop NULL pointer dereference.
Other sources
In the Linux kernel through 4.14.13, the rdscmsgatomic() function in 'net/rds/rdma.c' mishandles cases where page pinning fails or an invalid address is supplied by a user, leading to a NULL pointer dereference in rdsatomicfreeop() and thus to a system panic.
References:
https://marc.info/?t=151501368300001&r=1&w=4
https://patchwork.ozlabs.org/patch/855213/
An upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7d11f77f84b27cef452cee332f4e469503084737
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5333?
CVE-2018-5333 has been categorized with a high severity due to the potential for privilege escalation.
How do I fix CVE-2018-5333?
To resolve CVE-2018-5333, upgrade the Linux kernel to a version higher than 4.14.13.
What systems are affected by CVE-2018-5333?
CVE-2018-5333 affects Linux kernel versions up to 4.14.13 as well as specific Debian and Ubuntu releases.
What does CVE-2018-5333 exploit?
CVE-2018-5333 exploits a NULL pointer dereference in the rds_cmsg_atomic function related to page pinning failures.
Is there a workaround for CVE-2018-5333?
There is no direct workaround for CVE-2018-5333; upgrading the kernel is recommended to mitigate the vulnerability.