CVE-2018-8781
The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.49%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.49% probability · 41th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-190
- Affected
- linux/linux kernel · canonical/ubuntu linux · debian/debian linux · redhat/enterprise linux desktop · redhat/enterprise linux server · redhat/enterprise linux workstation
- Source
- cve@checkpoint.com
References
- https://access.redhat.com/errata/RHSA-2018:2948Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3083Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3096Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlMailing List, Third Party Advisory
- https://patchwork.freedesktop.org/patch/211845/Issue Tracking, Patch, Third Party Advisory
- https://research.checkpoint.com/mmap-vulnerabilities-linux-kernel/Third Party Advisory
- https://usn.ubuntu.com/3654-1/Third Party Advisory
- https://usn.ubuntu.com/3654-2/Third Party Advisory
- https://usn.ubuntu.com/3656-1/Third Party Advisory
- https://usn.ubuntu.com/3674-1/Third Party Advisory
- https://usn.ubuntu.com/3674-2/Third Party Advisory
- https://usn.ubuntu.com/3677-1/Third Party Advisory
- https://usn.ubuntu.com/3677-2/Third Party Advisory
- https://www.debian.org/security/2018/dsa-4187Third Party Advisory
- https://www.debian.org/security/2018/dsa-4188Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2948Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3083Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3096Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlMailing List, Third Party Advisory
- https://patchwork.freedesktop.org/patch/211845/Issue Tracking, Patch, Third Party Advisory
- https://research.checkpoint.com/mmap-vulnerabilities-linux-kernel/Third Party Advisory
- https://usn.ubuntu.com/3654-1/Third Party Advisory
- https://usn.ubuntu.com/3654-2/Third Party Advisory
- https://usn.ubuntu.com/3656-1/Third Party Advisory
- https://usn.ubuntu.com/3674-1/Third Party Advisory
- https://usn.ubuntu.com/3674-2/Third Party Advisory
- https://usn.ubuntu.com/3677-1/Third Party Advisory
- https://usn.ubuntu.com/3677-2/Third Party Advisory
- https://www.debian.org/security/2018/dsa-4187Third Party Advisory
- https://www.debian.org/security/2018/dsa-4188Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.