An issue was discovered in the Linux kernel through 4.18.8. The vmacacheflushall function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-17182.json"
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"185964673056050150984519946959341168318",
"266068693516038611360725618386551471346",
"143220755729447905005798851434285648416",
"102067439735930741349880842356910086549",
"295709339822372100717705749059255841723",
"51784506300485430071838244179287770190",
"178806048513478994461581473674614850804",
"165160953742891526946796780161039938243"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2018-17182-054bfda6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7a9cdebdcc17e426fb5287e4a82db1dfe86339b2",
"target": {
"file": "mm/debug.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"240124024396439504439803766782600832064",
"21059909105136678033621148383106719880",
"154154986865702304987939752280629165228",
"162471613048001888403654497079176542413",
"192333891268079154172687866068090318066",
"286806580424062801940934913028227711127",
"67314702419112730946684371173449540551",
"39910229674193220632443931151898107875",
"279966586834762827279875429252078786627",
"178713943606386439007039516395447798341",
"286094482447005461567487654892337246762",
"199599749797696848752992938147483229217",
"329297520795150354595621835685988853273",
"96643175498075856721837589001209984352",
"102833462443920232392518221328215597565",
"82540962685744743942056219381147613769"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2018-17182-16a55e1c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7a9cdebdcc17e426fb5287e4a82db1dfe86339b2",
"target": {
"file": "mm/vmacache.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 151.0,
"function_hash": "340180495965527980785898035930168444503"
},
"signature_type": "Function",
"id": "CVE-2018-17182-2b4bcd17",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7a9cdebdcc17e426fb5287e4a82db1dfe86339b2",
"target": {
"function": "vmacache_invalidate",
"file": "include/linux/vmacache.h"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"333132300510272803561971868881147864186",
"24187826790172754131596617378930317362",
"153212594765614045872250466950086837077",
"128432082023139094394643791719536656745"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2018-17182-5c103f28",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7a9cdebdcc17e426fb5287e4a82db1dfe86339b2",
"target": {
"file": "include/linux/mm_types.h"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"221241490687123560875667623694242161819",
"62741813222907544133702910539061606848",
"240513543511403637068503273723827415808",
"75528007170416660885941994288626984607"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2018-17182-93792c27",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7a9cdebdcc17e426fb5287e4a82db1dfe86339b2",
"target": {
"file": "include/linux/mm_types_task.h"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 269.0,
"function_hash": "162117403141697220560666191897487691340"
},
"signature_type": "Function",
"id": "CVE-2018-17182-9ffdd747",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7a9cdebdcc17e426fb5287e4a82db1dfe86339b2",
"target": {
"function": "vmacache_flush_all",
"file": "mm/vmacache.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 2104.0,
"function_hash": "117443267997079709498573459127511420058"
},
"signature_type": "Function",
"id": "CVE-2018-17182-b4afe9f7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7a9cdebdcc17e426fb5287e4a82db1dfe86339b2",
"target": {
"function": "dump_mm",
"file": "mm/debug.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"285601519453822061422654771777220466023",
"249640438434279102729558271899399160090",
"184443319641665932983425703766778814363",
"24001680737419618739535065760536965576",
"165941140460747395271876155711306920912",
"95192391830139623034201478175336679964",
"52681005502512929987595387678197094638",
"89511198294478524485407952491524136094"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2018-17182-cc445e2a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7a9cdebdcc17e426fb5287e4a82db1dfe86339b2",
"target": {
"file": "include/linux/vmacache.h"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"236901480781999103256260770456949433716",
"208896353763059738388238600491551412809",
"268443966611436317190529863525677094404",
"6859263621035147719017840809568614405"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2018-17182-d7a24f48",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7a9cdebdcc17e426fb5287e4a82db1dfe86339b2",
"target": {
"file": "include/linux/vm_event_item.h"
}
}
]