Wind River Support Network

HomeDefectsLIN9-7657
Fixed

LIN9-7657 : Security Advisory - linux - CVE-2018-18281

Created: Oct 31, 2018    Updated: Feb 2, 2019
Resolved Date: Dec 24, 2018
Found In Version: 9.0.0.18
Fix Version: 9.0.0.20
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Kernel

Description

Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. This is fixed in the following kernel versions: 4.9.135, 4.14.78, 4.18.16, 4.19.

https://nvd.nist.gov/vuln/detail/CVE-2018-18281

CVEs


Live chat
Online