CVE-2018-8087: Medium severity Linux Linux kernel vulnerability
Last updated 4 July 2026
Other sources
Memory leak in the hwsimnewradionl function in drivers/net/wireless/mac80211hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial of service (memory consumption) by triggering an out-of-array error case.
The Linux kernel is vulnerable to a memory leak in the drivers/net/wireless/mac80211hwsim.c:hwsimnewradionl() function. An attacker could exploit this to cause a potential denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:3.10.0-1062.rt56.1022.el7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-1062.el7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.16 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade
Linux kernel (drivers/net/wireless/mac80211_hwsim.c: hwsim_new_radio_nl)to a version that resolves this vulnerability.Patch 0ddcff49b672239dda94d70d0fcf50317a9f4b51
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2018-8087?
CVE-2018-8087 has a high severity rating due to its potential to cause denial of service through memory consumption.
How do I fix CVE-2018-8087?
To fix CVE-2018-8087, upgrade to the kernel versions that are listed as remedies, specifically those beyond 4.15.9.
Which systems are affected by CVE-2018-8087?
CVE-2018-8087 affects various Linux kernel versions up to 4.15.9, including those used in certain Red Hat, Debian, and Ubuntu distributions.
What type of vulnerability is CVE-2018-8087?
CVE-2018-8087 is a memory leak vulnerability that allows local users to consume memory and potentially crash the system.
Are there any known exploits for CVE-2018-8087?
There are currently no public exploits specifically targeting CVE-2018-8087, but its presence could be exploited under certain conditions.