Wind River Support Network

HomeDefectsSCP7-932

Fixed

SCP7-932 : Security Advisory - linux - CVE-2018-18386

Created: Oct 29, 2018 Updated: May 18, 2019

Resolved Date: Nov 29, 2018

Found In Version: 7.0.0.5

Fix Version: 7.0.0.30

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Kernel

Description

drivers/tty/n_tty.c in the Linux kernel before 4.14.11 allows local attackers (who are able to access pseudo terminals) to hang/block further use of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ.

https://nvd.nist.gov/vuln/detail/CVE-2018-18386