CVE-2018-5873

An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7 HIGH
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 41.14%
Affected Products (NVD)
VendorProductVersion
googleandroid
-
linuxlinux_kernel
3.19 ≤
𝑥
< 4.1.50
linuxlinux_kernel
4.2 ≤
𝑥
< 4.4.116
linuxlinux_kernel
4.5 ≤
𝑥
< 4.9.82
linuxlinux_kernel
4.10 ≤
𝑥
< 4.11
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.226-1
fixed
jessie
not-affected
sid
6.11.6-1
fixed
trixie
6.11.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux-gke
artful
dne
bionic
dne
cosmic
dne
focal
ignored
jammy
not-affected
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
not-affected
trusty
dne
xenial
ignored
linux-aws-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-gcp-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-nvidia-bos
bionic
dne
focal
dne
jammy
dne
noble
dne
questing
dne
resolute
not-affected
trusty
dne
xenial
dne
linux-nvidia-7.0
bionic
dne
focal
dne
jammy
dne
noble
not-affected
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-hwe-7.0
bionic
dne
focal
dne
jammy
dne
noble
not-affected
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-oem-7.0
bionic
dne
focal
dne
jammy
dne
noble
dne
questing
dne
resolute
not-affected
trusty
dne
xenial
dne
linux-aws-7.0
bionic
dne
focal
dne
jammy
dne
noble
not-affected
resolute
dne
trusty
dne
xenial
dne
linux
artful
not-affected
bionic
not-affected
cosmic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
not-affected
plucky
not-affected
questing
not-affected
resolute
not-affected
trusty
not-affected
xenial
Fixed 4.4.0-121.145
released
linux-aws
artful
dne
bionic
not-affected
cosmic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
not-affected
plucky
not-affected
questing
not-affected
resolute
not-affected
trusty
Fixed 4.4.0-1017.17
released
xenial
Fixed 4.4.0-1055.64
released
linux-aws-5.15
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-aws-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-aws-6.14
bionic
dne
focal
dne
jammy
dne
noble
not-affected
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-aws-6.17
bionic
dne
focal
dne
jammy
dne
noble
not-affected
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-aws-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-aws-hwe
bionic
dne
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
not-affected
linux-azure
artful
dne
bionic
not-affected
cosmic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
not-affected
plucky
not-affected
questing
not-affected
resolute
not-affected
trusty
not-affected
xenial
not-affected
linux-azure-4.15
bionic
not-affected
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-5.15
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-6.11
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-6.14
bionic
dne
focal
dne
jammy
dne
noble
not-affected
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-6.17
bionic
dne
focal
dne
jammy
dne
noble
not-affected
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-edge
artful
dne
bionic
pending
cosmic
dne
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-fde
bionic
dne
focal
ignored
jammy
not-affected
noble
not-affected
oracular
dne
plucky
not-affected
questing
not-affected
resolute
not-affected
trusty
dne
xenial
dne
linux-azure-fde-5.15
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-fde-6.14
bionic
dne
focal
dne
jammy
dne
noble
not-affected
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-fde-6.17
bionic
dne
focal
dne
jammy
dne
noble
not-affected
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-fde-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-nvidia
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-azure-nvidia-6.14
bionic
dne
focal
dne
jammy
dne
noble
not-affected
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-bluefield
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-euclid
artful
dne
bionic
dne
cosmic
dne
trusty
dne
xenial
ignored
linux-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
Fixed 4.4.0-1017.22~recert1
released
linux-flo
artful
dne
bionic
dne
cosmic
dne
trusty
dne
xenial
ignored
linux-gcp
artful
dne
bionic
not-affected
cosmic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
not-affected
plucky
not-affected
questing
not-affected
resolute
not-affected
trusty
dne
xenial
Fixed 4.13.0-1002.5
released
linux-gcp-4.15
bionic
not-affected
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-gcp-5.15
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-gcp-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-gcp-6.11
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-gcp-6.14
bionic
dne
focal
dne
jammy
dne
noble
not-affected
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-gcp-6.17
bionic
dne
focal
dne
jammy
dne
noble
not-affected
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-gcp-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-gkeop
bionic
dne
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-gkeop-5.15
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-goldfish
artful
dne
bionic
dne
cosmic
dne
trusty
dne
xenial
ignored
linux-grouper
artful
dne
bionic
dne
cosmic
dne
trusty
dne
xenial
dne
linux-hwe
artful
dne
bionic
not-affected
cosmic
dne
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
Fixed 4.13.0-32.35~16.04.1
released
linux-hwe-5.15
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-hwe-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-hwe-6.11
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-hwe-6.14
bionic
dne
focal
dne
jammy
dne
noble
not-affected
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-hwe-6.17
bionic
dne
focal
dne
jammy
dne
noble
not-affected
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-hwe-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-hwe-edge
artful
dne
bionic
not-affected
cosmic
dne
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
Fixed 4.13.0-26.29~16.04.2
released
linux-ibm
bionic
dne
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
not-affected
trusty
dne
xenial
dne
linux-ibm-5.15
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-ibm-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-ibm-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-intel
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-intel-iot-realtime
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-intel-iotg
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-intel-iotg-5.15
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-iot
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-kvm
artful
dne
bionic
not-affected
cosmic
not-affected
focal
not-affected
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
Fixed 4.4.0-1021.26
released
linux-lowlatency
bionic
dne
focal
dne
jammy
not-affected
noble
not-affected
oracular
not-affected
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-5.15
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-6.11
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-lts-trusty
artful
dne
bionic
dne
cosmic
dne
trusty
dne
xenial
dne
linux-lts-utopic
artful
dne
bionic
dne
cosmic
dne
trusty
dne
xenial
dne
linux-lts-vivid
artful
dne
bionic
dne
cosmic
dne
trusty
dne
xenial
dne
linux-lts-wily
artful
dne
bionic
dne
cosmic
dne
trusty
dne
xenial
dne
linux-lts-xenial
artful
dne
bionic
dne
cosmic
dne
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
Fixed 4.4.0-121.145~14.04.1
released
xenial
dne
linux-maguro
artful
dne
bionic
dne
cosmic
dne
trusty
dne
xenial
dne
linux-mako
artful
dne
bionic
dne
cosmic
dne
trusty
dne
xenial
ignored
linux-manta
artful
dne
bionic
dne
cosmic
dne
trusty
dne
xenial
dne
linux-nvidia
bionic
dne
focal
dne
jammy
not-affected
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
not-affected
trusty
dne
xenial
dne
linux-nvidia-6.11
bionic
dne
focal
dne
jammy
dne
noble
not-affected
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-nvidia-6.17
bionic
dne
focal
dne
jammy
dne
noble
not-affected
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-nvidia-6.5
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-nvidia-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-nvidia-bos-7.0
bionic
dne
focal
dne
jammy
dne
noble
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-nvidia-lowlatency
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-nvidia-tegra
bionic
dne
focal
dne
jammy
not-affected
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-nvidia-tegra-5.15
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-nvidia-tegra-igx
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-oem
artful
dne
bionic
not-affected
cosmic
not-affected
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
not-affected
linux-oem-6.11
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-oem-6.14
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-oem-6.17
bionic
dne
focal
dne
jammy
dne
noble
not-affected
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-oem-6.8
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-oracle
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
not-affected
plucky
not-affected
questing
not-affected
resolute
not-affected
trusty
dne
xenial
not-affected
linux-oracle-5.15
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-oracle-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-oracle-6.14
bionic
dne
focal
dne
jammy
dne
noble
not-affected
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-oracle-6.17
bionic
dne
focal
dne
jammy
dne
noble
not-affected
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-oracle-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-raspi
bionic
dne
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
not-affected
plucky
not-affected
questing
not-affected
resolute
not-affected
trusty
dne
xenial
dne
linux-raspi-5.4
bionic
not-affected
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-raspi-realtime
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-raspi2
artful
not-affected
bionic
not-affected
cosmic
not-affected
focal
ignored
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
Fixed 4.4.0-1087.95
released
linux-realtime
bionic
dne
focal
dne
jammy
not-affected
noble
not-affected
oracular
not-affected
plucky
not-affected
questing
not-affected
resolute
not-affected
trusty
dne
xenial
dne
linux-realtime-6.14
bionic
dne
focal
dne
jammy
dne
noble
not-affected
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-realtime-6.17
bionic
dne
focal
dne
jammy
dne
noble
not-affected
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-realtime-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-riscv
bionic
dne
focal
ignored
jammy
ignored
noble
not-affected
oracular
not-affected
plucky
not-affected
questing
not-affected
resolute
not-affected
trusty
dne
xenial
dne
linux-riscv-5.15
bionic
dne
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-riscv-6.14
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-riscv-6.17
bionic
dne
focal
dne
jammy
dne
noble
not-affected
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-riscv-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-snapdragon
artful
Fixed 4.4.0-1090.95
released
bionic
not-affected
cosmic
dne
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
Fixed 4.4.0-1090.95
released
linux-xilinx
bionic
dne
focal
dne
jammy
dne
noble
not-affected
plucky
not-affected
questing
dne
resolute
dne
trusty
dne
xenial
dne
linux-xilinx-zynqmp
bionic
dne
focal
not-affected
jammy
not-affected
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
dne
xenial
dne
Common Weakness Enumeration
References
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073c516ff73557a8f7315066856c04b50383ac34
https://github.com/torvalds/linux/commit/073c516ff73557a8f7315066856c04b50383ac34
https://source.android.com/security/bulletin/2018-07-01
https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=34742aaf7cb16c95edba4a7afed6d2c4fa7e434b
https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073c516ff73557a8f7315066856c04b50383ac34
https://github.com/torvalds/linux/commit/073c516ff73557a8f7315066856c04b50383ac34
https://source.android.com/security/bulletin/2018-07-01
https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=34742aaf7cb16c95edba4a7afed6d2c4fa7e434b
https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin