CVE-2018-5873

An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7 HIGH
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
qualcommCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
VendorProductVersion
googleandroid
-
linuxlinux_kernel
3.19 ≤
𝑥
< 4.1.50
linuxlinux_kernel
4.2 ≤
𝑥
< 4.4.116
linuxlinux_kernel
4.5 ≤
𝑥
< 4.9.82
linuxlinux_kernel
4.10 ≤
𝑥
< 4.11
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bullseye
5.10.223-1
fixed
jessie
not-affected
bullseye (security)
5.10.226-1
fixed
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
trixie
6.11.5-1
fixed
sid
6.11.6-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
bionic
not-affected
artful
not-affected
xenial
Fixed 4.4.0-121.145
released
trusty
not-affected
linux-aws
bionic
not-affected
artful
dne
xenial
Fixed 4.4.0-1055.64
released
trusty
Fixed 4.4.0-1017.17
released
linux-azure
bionic
not-affected
artful
dne
xenial
not-affected
trusty
not-affected
linux-azure-edge
bionic
pending
artful
dne
xenial
not-affected
trusty
dne
linux-euclid
bionic
dne
artful
dne
xenial
ignored
trusty
dne
linux-flo
bionic
dne
artful
dne
xenial
ignored
trusty
dne
linux-gcp
bionic
not-affected
artful
dne
xenial
Fixed 4.13.0-1002.5
released
trusty
dne
linux-gke
bionic
dne
artful
dne
xenial
ignored
trusty
dne
linux-goldfish
bionic
dne
artful
dne
xenial
ignored
trusty
dne
linux-grouper
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-hwe
bionic
not-affected
artful
dne
xenial
Fixed 4.13.0-26.29~16.04.2
released
trusty
dne
linux-hwe-edge
bionic
Fixed 4.18.0-8.9~18.04.1
released
artful
dne
xenial
Fixed 4.13.0-26.29~16.04.2
released
trusty
dne
linux-kvm
bionic
not-affected
artful
dne
xenial
Fixed 4.4.0-1021.26
released
trusty
dne
linux-lts-trusty
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-lts-utopic
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-lts-vivid
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-lts-wily
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-lts-xenial
bionic
dne
artful
dne
xenial
dne
trusty
Fixed 4.4.0-121.145~14.04.1
released
linux-maguro
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-mako
bionic
dne
artful
dne
xenial
ignored
trusty
dne
linux-manta
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-oem
bionic
not-affected
artful
dne
xenial
not-affected
trusty
dne
linux-raspi2
bionic
not-affected
artful
not-affected
xenial
Fixed 4.4.0-1087.95
released
trusty
dne
linux-snapdragon
bionic
not-affected
artful
Fixed 4.4.0-1090.95
released
xenial
Fixed 4.4.0-1090.95
released
trusty
dne
Common Weakness Enumeration
References
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073c516ff73557a8f7315066856c04b50383ac34
https://github.com/torvalds/linux/commit/073c516ff73557a8f7315066856c04b50383ac34
https://source.android.com/security/bulletin/2018-07-01
https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=34742aaf7cb16c95edba4a7afed6d2c4fa7e434b
https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073c516ff73557a8f7315066856c04b50383ac34
https://github.com/torvalds/linux/commit/073c516ff73557a8f7315066856c04b50383ac34
https://source.android.com/security/bulletin/2018-07-01
https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=34742aaf7cb16c95edba4a7afed6d2c4fa7e434b
https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin