Fixed
Created: Oct 14, 2018
Updated: Mar 8, 2020
Resolved Date: Mar 12, 2019
Found In Version: 6.0.0.38
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Kernel
The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
https://nvd.nist.gov/vuln/detail/CVE-2018-17977
