Linux Kernel - Denial of Service Vulnerabilities
Summary
DLA-1392-1: linux - security update. Affects linux versions < 3.2.102-1. Fixed in 3.2.102-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and providing essential functionality. It is widely used in various distributions, including Debian 7 Wheezy. This vulnerability affects the Linux package in Debian 7 Wheezy.
Vulnerability Detail
Multiple denial of service vulnerabilities have been discovered in the Linux kernel. These vulnerabilities can be exploited by local users to cause a denial of service, leading to system crashes or unresponsive behavior. The specific vulnerabilities include:
- CVE-2018-1093: A crafted ext4 filesystem image can trigger an out-of-bounds read, resulting in a denial of service.
- CVE-2018-1130: The DCCP implementation of sendmsg() does not check the socket state, leading to a null pointer dereference and a potential crash.
- CVE-2018-8897: Unprivileged users can crash the kernel by exploiting deferred #DB exceptions.
- CVE-2018-10940: The cdrom driver does not properly validate the parameter to the CDROM_MEDIA_CHANGED ioctl, allowing a user with access to a cdrom device to cause a denial of service.
How To Fix
Minimum fixed version
3.2.102-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for these vulnerabilities.
Conclusion
Multiple denial of service vulnerabilities have been discovered in the Linux kernel. It is recommended to upgrade the linux package to version 3.2.102-1 or later to mitigate these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
These vulnerabilities can be exploited by local users to cause a denial of service, resulting in system crashes or unresponsive behavior.
Local users with the ability to mount arbitrary filesystems or access cdrom devices can exploit these vulnerabilities.
Upgrading to the fixed version of the linux package is the recommended mitigation for these vulnerabilities.
No, these vulnerabilities can only be exploited by local users.
There is no evidence of active exploits at the time of this advisory.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
