CVE-2018-10124 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Kernel

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-190 — Integer Overflow or Wraparound12 documents7 sources
Severity
5.5MEDIUMNVD
OSV7.8OSV4.3
EPSS
0.0%
top 88.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Linux KernelDebian LinuxCanonical Ubuntu Linux+1 more
Timeline
PublishedApr 16
Latest updateMay 14

Description

The kill_something_info function in kernel/signal.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service via an INT_MIN argument.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel< 4.13
▶Debianlinux/linux_kernel< 4.13.4-1+3
▶Ubuntulinux/linux_kernel< 3.13.0-157.207+1
▶debiandebian/linux< linux 4.13.4-1 (bookworm)

Also affects: Debian Linux 8.0, Ubuntu Linux 14.04, 16.04

Patches

Patch: git.kernel.org ↗Patch: github.com ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

5
GHSA
GHSA-hj22-29m3-p63r: The kill_something_info function in kernel/signal↗2022-05-14
▶
OSV
linux vulnerabilities↗2018-08-24
▶
OSV
linux-lts-xenial, linux-aws vulnerabilities↗2018-07-02
▶
OSV
linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities↗2018-07-02
▶
OSV
CVE-2018-10124: The kill_something_info function in kernel/signal↗2018-04-16
▶

📋Vendor Advisories

5
Ubuntu
Linux kernel vulnerabilities↗2018-08-24
▶
Ubuntu
Linux kernel vulnerabilities↗2018-07-02
▶
Ubuntu
Linux kernel (Xenial HWE) vulnerabilities↗2018-07-02
▶
Debian
CVE-2018-10124: linux - The kill_something_info function in kernel/signal.c in the Linux kernel before 4...↗2018
▶
Red Hat
kernel: Undefined behaviour with INT_MIN argument in kernel/signal.c:kill_something_info() allows for denial of service↗2017-07-11
▶

💬Community

1
Bugzilla
CVE-2018-10124 kernel: Undefined behaviour with INT_MIN argument in kernel/signal.c:kill_something_info() allows for denial of service↗2018-04-17
▶