CVE-2018-7995: Race Condition
DISPUTED Race condition in the storeintwithrestart() function in arch/x86/kernel/cpu/mcheck/mce.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (panic) by leveraging root access to write to the checkinterval file in a /sys/devices/system/machinecheck/machinecheck<cpu number> directory. NOTE: a third party has indicated that this report is not security relevant.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7995?
CVE-2018-7995 has been classified as a denial of service vulnerability due to a race condition in the Linux kernel.
How do I fix CVE-2018-7995?
To fix CVE-2018-7995, update your Linux kernel to a version later than 4.15.7, including patched versions such as 5.10.223-1 or 6.1.123-1.
Which versions of Linux are affected by CVE-2018-7995?
CVE-2018-7995 affects the Linux kernel up to version 4.15.7 and specific distributions including Ubuntu 14.04, Ubuntu 16.04, and Debian 7.0.
How can CVE-2018-7995 be exploited?
CVE-2018-7995 can be exploited by local users with root access who write to the check_interval file causing system panic.
Is there a known mitigation for CVE-2018-7995?
The primary mitigation for CVE-2018-7995 is to ensure that systems are updated with the latest kernel patches that address the race condition.