CVE-2018-17182 in Androidinfo

Summary

An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

09/19/2018

Disclosure

09/19/2018

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
130430Google Android Memory Manager use after free416Proof-of-ConceptOfficial fixCVE-2018-17182
124262Linux Kernel vmacache.c vmacache_flush_all use after free416Proof-of-ConceptOfficial fixCVE-2018-17182

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Want to know what is going to be exploited?

We predict KEV entries!