CVE-2018-16880

CWE-787Out-of-bounds Write13 documents10 sources
Severity
7.0HIGH
EPSS
0.1%
top 72.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 29
Latest updateMay 14

Description

A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. Versions from v4.16 and newer are vulnerable.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages3 packages

CVEListV5the_linux_foundation/kernelfrom v4.16 and newer
NVDlinux/linux_kernel4.164.19.20+1
Debianlinux< 4.19.20-1+3

Also affects: Ubuntu Linux 18.04, 18.10

Patches

🔴Vulnerability Details

5
GHSA
GHSA-x3fm-32v3-x7hm: A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver2022-05-14
OSV
linux-hwe, linux-azure vulnerabilities2019-03-06
CVEList
CVE-2018-16880: A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver2019-01-29
OSV
CVE-2018-16880: A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver2019-01-29
Kernel
vhost: fix OOB in get_rx_bufs()2019-01-28

📋Vendor Advisories

5
Ubuntu
Linux kernel (HWE) vulnerabilities2019-03-06
Ubuntu
Linux kernel vulnerabilities2019-03-06
Red Hat
kernel: Out of bounds write in get_rx_bufs() function in drivers/vhost/net.c2019-01-25
Microsoft
A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest under specific conditions can trigger an out-of-bounds write in a kmalloc-8 slab on a v2019-01-08
Debian
CVE-2018-16880: linux - A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] d...2018

💬Community

2
Bugzilla
CVE-2018-16880 kernel: Out of bounds write in get_rx_bufs() function in drivers/vhost/net.c [fedora-all]2019-01-25
Bugzilla
CVE-2018-16880 kernel: Out of bounds write in get_rx_bufs() function in drivers/vhost/net.c2018-12-05
CVE-2018-16880 (HIGH CVSS 7) | A flaw was found in the Linux kerne | cvebase.io