Acknowledged
Created: Oct 14, 2018
Updated: Jun 10, 2019
Found In Version: unknown
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Kernel
The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
https://nvd.nist.gov/vuln/detail/CVE-2018-17977
