The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains holes), related to fs/userfaultfd.c and mm/userfaultfd.c.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Information
Published : 2018-12-12 02:29
Updated : 2020-08-24 10:37
NVD link : CVE-2018-18397
Mitre link : CVE-2018-18397
JSON object : View
CWE
CWE-863
Incorrect Authorization
Products Affected
redhat
- enterprise_linux_desktop
- enterprise_linux_server_aus
- enterprise_linux_workstation
- openshift_container_platform
- enterprise_linux_server_tus
- enterprise_linux_server_eus
- virtualization_host
- enterprise_linux_server
canonical
- ubuntu_linux
linux
- linux_kernel