CVE-2018-18397
Fixed in a distro release EPSS <1%
The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains holes), related to fs/userfaultfd.c and mm/userfaultfd.c.
Products: linux_kernel, redhat openshift_container_platform, redhat virtualization_host, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 4.19.9-1 |
| Debian 13 | linux | 4.19.9-1 |
| Debian 14 | linux | 4.19.9-1 |
| Red Hat Enterprise Linux 7 | bpftool | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-abi-whitelists | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-abi-whitelists | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-alt | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-bootwrapper | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-bootwrapper | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-debug | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-debug-debuginfo | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug-debuginfo | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-debug-devel | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug-devel | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-debuginfo | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-debuginfo | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-ppc64 | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-ppc64le | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-ppc64le | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-s390x | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-x86_64 | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-devel | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-devel | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-doc | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-doc | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-headers | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-headers | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-kdump | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump-debuginfo | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump-devel | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-tools-debuginfo | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-debuginfo | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-tools-libs | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-libs | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | kernel-tools-libs-devel | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-libs-devel | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | perf | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | perf | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | perf-debuginfo | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | perf-debuginfo | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | python-perf | 0:3.10.0-957.5.1.el7 |
| Red Hat Enterprise Linux 7 | python-perf | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | python-perf-debuginfo | 0:4.14.0-115.7.1.el7a |
| Red Hat Enterprise Linux 7 | python-perf-debuginfo | 0:3.10.0-957.5.1.el7 |
| Red Hat rhel eus 7.4 | kernel | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-abi-whitelists | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-bootwrapper | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-debug | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-debug-debuginfo | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-debug-devel | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-debuginfo | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-debuginfo-common-ppc64 | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-debuginfo-common-ppc64le | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-debuginfo-common-s390x | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-debuginfo-common-x86_64 | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-devel | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-doc | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-headers | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-kdump | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-kdump-debuginfo | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-kdump-devel | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-tools | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-tools-debuginfo | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-tools-libs | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | kernel-tools-libs-devel | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | perf | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | perf-debuginfo | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | python-perf | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.4 | python-perf-debuginfo | 0:3.10.0-693.44.1.el7 |
| Red Hat rhel eus 7.5 | kernel | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-abi-whitelists | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-bootwrapper | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-debug | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-debug-debuginfo | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-debug-devel | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-debuginfo | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-debuginfo-common-ppc64 | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-debuginfo-common-ppc64le | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-debuginfo-common-s390x | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-debuginfo-common-x86_64 | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-devel | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-doc | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-headers | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-kdump | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-kdump-debuginfo | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-kdump-devel | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-tools | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-tools-debuginfo | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-tools-libs | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | kernel-tools-libs-devel | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | perf | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | perf-debuginfo | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | python-perf | 0:3.10.0-862.27.1.el7 |
| Red Hat rhel eus 7.5 | python-perf-debuginfo | 0:3.10.0-862.27.1.el7 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-default | 4.12.14-95.6.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-source | 4.12.14-95.6.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-syms | 4.12.14-95.6.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP4 | kernel-default | 4.12.14-95.6.1 |
| SUSE Linux Enterprise High Availability Extension 15 | kernel-default | 4.12.14-25.28.1 |
| SUSE Linux Enterprise Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_2 | 1-6.3.1 |
| SUSE Linux Enterprise Live Patching 15 | kernel-default | 4.12.14-25.28.1 |
| SUSE Linux Enterprise Live Patching 15 | kernel-livepatch-SLE15_Update_8 | 1-1.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-default | 4.12.14-25.28.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-source | 4.12.14-25.28.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-zfcpdump | 4.12.14-25.28.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-docs | 4.12.14-25.28.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-obs-build | 4.12.14-25.28.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-source | 4.12.14-25.28.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-syms | 4.12.14-25.28.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-vanilla | 4.12.14-25.28.1 |
| SUSE Linux Enterprise Module for Legacy 15 | kernel-default | 4.12.14-25.28.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-azure | 4.12.14-5.19.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-source-azure | 4.12.14-5.19.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-syms-azure | 4.12.14-5.19.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-azure | 4.12.14-6.6.2 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-default | 4.12.14-95.6.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-source | 4.12.14-95.6.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-source-azure | 4.12.14-6.6.2 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-syms | 4.12.14-95.6.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-syms-azure | 4.12.14-6.6.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-azure | 4.12.14-6.6.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-default | 4.12.14-95.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source | 4.12.14-95.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source-azure | 4.12.14-6.6.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-syms | 4.12.14-95.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-syms-azure | 4.12.14-6.6.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | kernel-docs | 4.12.14-95.6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | kernel-obs-build | 4.12.14-95.6.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | kernel-default | 4.12.14-95.6.1 |
| SUSE Linux Enterprise Workstation Extension 15 | kernel-default | 4.12.14-25.28.1 |
| Ubuntu 14.04 LTS | linux-azure | 4.15.0-1040.44~14.04.1 |
| Ubuntu 16.04 LTS | linux-aws-hwe | 4.15.0-1033.35~16.04.1 |
| Ubuntu 16.04 LTS | linux-azure | 4.15.0-1040.44 |
| Ubuntu 16.04 LTS | linux-gcp | 4.15.0-1028.29~16.04.1 |
| Ubuntu 16.04 LTS | linux-hwe | 4.15.0-46.49~16.04.1 |
| Ubuntu 16.04 LTS | linux-oracle | 4.15.0-1009.11~16.04.1 |
| Ubuntu 18.04 LTS | linux | 4.15.0-46.49 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1033.35 |
| Ubuntu 18.04 LTS | linux-azure | 4.18.0-1013.13~18.04.1 |
| Ubuntu 18.04 LTS | linux-gcp | 4.15.0-1028.29 |
| Ubuntu 18.04 LTS | linux-gcp-edge | 4.18.0-1007.8~18.04.1 |
| Ubuntu 18.04 LTS | linux-hwe | 4.18.0-16.17~18.04.1 |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1030.30 |
| Ubuntu 18.04 LTS | linux-oem | 4.15.0-1034.39 |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1009.11 |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1032.34 |
| openSUSE Leap 15.0 | kernel-source | 4.12.14-lp150.12.45.1 |