The dogetmempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "4.0"
},
{
"introduced": "0"
},
{
"last_affected": "6.0"
},
{
"introduced": "0"
},
{
"last_affected": "6.0"
},
{
"introduced": "0"
},
{
"last_affected": "6.4"
},
{
"introduced": "0"
},
{
"last_affected": "6.5"
},
{
"introduced": "0"
},
{
"last_affected": "6.6"
},
{
"introduced": "0"
},
{
"last_affected": "6.7"
},
{
"introduced": "0"
},
{
"last_affected": "6.6"
},
{
"introduced": "0"
},
{
"last_affected": "6.0"
}
]
}[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.2.95"
}
]
},
{
"events": [
{
"introduced": "3.3"
},
{
"fixed": "3.16.50"
}
]
},
{
"events": [
{
"introduced": "3.17"
},
{
"fixed": "3.18.67"
}
]
},
{
"events": [
{
"introduced": "3.19"
},
{
"fixed": "4.1.45"
}
]
},
{
"events": [
{
"introduced": "4.2"
},
{
"fixed": "4.4.84"
}
]
},
{
"events": [
{
"introduced": "4.5"
},
{
"fixed": "4.9.45"
}
]
},
{
"events": [
{
"introduced": "4.10"
},
{
"fixed": "4.12.9"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.04"
}
]
}
]
[
{
"target": {
"function": "do_get_mempolicy",
"file": "mm/mempolicy.c"
},
"id": "CVE-2018-10675-9c63b782",
"digest": {
"function_hash": "240368518124436783273569467076381733009",
"length": 1680.0
},
"source": "https://github.com/torvalds/linux/commit/73223e4e2e3867ebf033a5a8eb2e5df0158ccc99",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"target": {
"file": "mm/mempolicy.c"
},
"id": "CVE-2018-10675-f78e20c6",
"digest": {
"line_hashes": [
"200697267678104705072667206858560527461",
"262502744686071801984867177093411079041",
"291308058533605756870538996706544504452",
"216433565968594569387720021203249945295",
"10317602962687720293053350893925115778",
"276648711930179102191678867305494622322",
"326394827429076570159279764294690518291"
],
"threshold": 0.9
},
"source": "https://github.com/torvalds/linux/commit/73223e4e2e3867ebf033a5a8eb2e5df0158ccc99",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10675.json"