Out of Boundary Access Vulnerability in Linux Kernel - CVE-2017-18379
Summary
CVE-2017-18379: In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c. Affects linux versions < 4.14.2-1. Fixed in 4.14.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is widely used across various platforms, from servers to embedded systems. The vulnerability CVE-2017-18379 affects the Linux kernel versions prior to 4.14, specifically in the NVMe target driver, which handles the Non-Volatile Memory Express protocol for storage devices. This vulnerability can lead to severe security risks if exploited.
Vulnerability Detail
CVE-2017-18379 is an out of boundary access vulnerability found in the NVMe target driver of the Linux kernel. This issue arises from improper handling of memory access, which can allow an attacker to read or write outside the allocated memory bounds. The ramifications of this vulnerability include potential data corruption, unauthorized access to sensitive information, and system crashes. The vulnerability is particularly critical as it can be exploited remotely, leading to a CVSS score of 9.8, indicating a high severity level.
How To Fix
Minimum fixed version
4.14.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users may consider disabling the NVMe target driver if it is not essential for their operations. This can be done by blacklisting the driver in the system configuration. To blacklist the driver, add the following line to the '/etc/modprobe.d/blacklist.conf' file:
blacklist nvmet
Then, update the initramfs:
sudo update-initramfs -u
Conclusion
CVE-2017-18379 represents a significant security risk within the Linux kernel, particularly affecting systems using the NVMe target driver. Users are strongly advised to upgrade their kernel versions to mitigate this vulnerability. Additionally, temporary workarounds are available for those unable to upgrade immediately.
See every vulnerability recorded for linux →
FAQ
CVE-2017-18379 is a vulnerability in the Linux kernel that allows for out of boundary memory access in the NVMe target driver.
Exploitation of this vulnerability can lead to data corruption, unauthorized access to sensitive information, and system instability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The recommended action is to upgrade your Linux kernel to version 4.14.2-1 or later.
Yes, you can temporarily disable the NVMe target driver by blacklisting it in your system configuration.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
