CVE-2018-6554: Medium severity Linux Linux kernel vulnerability
Last updated 25 August 2025
Other sources
Memory leak in the irdabind function in net/irda/afirda.c and later in drivers/staging/irda/net/afirda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (memory consumption) by repeatedly binding an AFIRDA socket.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2
Event History
Frequently Asked Questions
What is CVE-2018-6554?
CVE-2018-6554 is a memory leak vulnerability in the irda_bind function in the Linux kernel before version 4.17.
How does CVE-2018-6554 impact the system?
CVE-2018-6554 can be exploited by local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket.
Which systems are affected by CVE-2018-6554?
Systems running Linux kernel versions before 4.17 are affected by CVE-2018-6554.
What is the severity of CVE-2018-6554?
The severity of CVE-2018-6554 is medium.
How can I fix CVE-2018-6554?
To fix CVE-2018-6554, update the Linux kernel to version 4.17 or later.