CVE-2018-10902

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.

References

http://www.securityfocus.com/bid/105119

http://www.securitytracker.com/id/1041529

https://access.redhat.com/errata/RHSA-2018:3083

https://access.redhat.com/errata/RHSA-2018:3096

https://access.redhat.com/errata/RHSA-2019:0415

https://access.redhat.com/errata/RHSA-2019:0641

https://access.redhat.com/errata/RHSA-2019:3217

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10902

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=39675f7a7c7e7702f7d5341f1e0d01db746543a0

https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html

https://usn.ubuntu.com/3776-1/

https://usn.ubuntu.com/3776-2/

https://usn.ubuntu.com/3847-1/

https://usn.ubuntu.com/3847-2/

https://usn.ubuntu.com/3847-3/

https://usn.ubuntu.com/3849-1/

https://usn.ubuntu.com/3849-2/

https://www.debian.org/security/2018/dsa-4308

Details

Source: MITRE

Published: 2018-08-21

Updated: 2019-10-09

Type: CWE-415

Risk Information

CVSS v2

Base Score: 4.6

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 3.9

Severity: MEDIUM

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 1.8

Severity: HIGH

Tenable Plugins

View all (51 total)

IDNameProductFamilySeverity
149098EulerOS 2.0 SP3 : kernel (EulerOS-SA-2021-1808)NessusHuawei Local Security Checks
high
146511SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0452-1)NessusSuSE Local Security Checks
high
131701Juniper Junos Space < 19.2R1 Multiple Vulnerabilities (JSA10951)NessusJunos Local Security Checks
critical
131375RHEL 7 : kernel (RHSA-2019:3967)NessusRed Hat Local Security Checks
high
130373RHEL 7 : kernel-alt (RHSA-2019:3217)NessusRed Hat Local Security Checks
high
127420NewStart CGSL MAIN 4.05 : kernel Vulnerability (NS-SA-2019-0149)NessusNewStart CGSL Local Security Checks
high
127312NewStart CGSL MAIN 4.06 : kernel Multiple Vulnerabilities (NS-SA-2019-0092)NessusNewStart CGSL Local Security Checks
medium
127233NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0049)NessusNewStart CGSL Local Security Checks
high
127222NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0044)NessusNewStart CGSL Local Security Checks
high
124992EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1539)NessusHuawei Local Security Checks
critical
124835EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1514)NessusHuawei Local Security Checks
medium
123727EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1259)NessusHuawei Local Security Checks
high
123630EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1156)NessusHuawei Local Security Checks
medium
123605EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-1131)NessusHuawei Local Security Checks
medium
123432RHEL 6 : MRG (RHSA-2019:0641)NessusRed Hat Local Security Checks
high
123329openSUSE Security Update : the Linux Kernel (openSUSE-2019-769)NessusSuSE Local Security Checks
high
122467Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20190226)NessusScientific Linux Local Security Checks
high
122463RHEL 6 : kernel (RHSA-2019:0415)NessusRed Hat Local Security Checks
high
122460Oracle Linux 6 : kernel (ELSA-2019-0415)NessusOracle Linux Local Security Checks
high
122450CentOS 6 : kernel (CESA-2019:0415)NessusCentOS Local Security Checks
high
120088SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:2539-1)NessusSuSE Local Security Checks
high
119832Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3849-1)NessusUbuntu Local Security Checks
high
119829Ubuntu 14.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3847-3)NessusUbuntu Local Security Checks
high
119828Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3847-2)NessusUbuntu Local Security Checks
high
119827Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3847-1)NessusUbuntu Local Security Checks
high
119638Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2018-4304)NessusOracle Linux Local Security Checks
high
119566OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0286)NessusOracleVM Local Security Checks
high
119535Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4300)NessusOracle Linux Local Security Checks
high
119534Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4299)NessusOracle Linux Local Security Checks
high
119187Scientific Linux Security Update : kernel on SL7.x x86_64 (20181030)NessusScientific Linux Local Security Checks
high
118990CentOS 7 : kernel (CESA-2018:3083)NessusCentOS Local Security Checks
high
118770Oracle Linux 7 : kernel (ELSA-2018-3083)NessusOracle Linux Local Security Checks
high
118528RHEL 7 : kernel-rt (RHSA-2018:3096)NessusRed Hat Local Security Checks
high
118525RHEL 7 : kernel (RHSA-2018:3083)NessusRed Hat Local Security Checks
high
118034SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3084-1)NessusSuSE Local Security Checks
high
118033SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3083-1)NessusSuSE Local Security Checks
high
117988openSUSE Security Update : the Linux Kernel (openSUSE-2018-1140)NessusSuSE Local Security Checks
high
117908Debian DLA-1531-1 : linux-4.9 security updateNessusDebian Local Security Checks
high
117871Ubuntu 14.04 LTS : linux-lts-xenial, linux-aws vulnerabilities (USN-3776-2)NessusUbuntu Local Security Checks
high
117870Ubuntu 16.04 LTS : linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities (USN-3776-1)NessusUbuntu Local Security Checks
high
117866SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2960-1)NessusSuSE Local Security Checks
high
117862Debian DSA-4308-1 : linux - security updateNessusDebian Local Security Checks
high
117824SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2908-1)NessusSuSE Local Security Checks
high
117823SUSE SLES11 Security Update : kernel (SUSE-SU-2018:2907-1)NessusSuSE Local Security Checks
high
117820SUSE SLES11 Security Update : kernel (SUSE-SU-2018:2879-1)NessusSuSE Local Security Checks
high
117802SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2864-1)NessusSuSE Local Security Checks
high
117801SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2860-1)NessusSuSE Local Security Checks
high
117800SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2858-1)NessusSuSE Local Security Checks
high
117663SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2787-1)NessusSuSE Local Security Checks
high
117629SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:2776-1)NessusSuSE Local Security Checks
high
117523openSUSE Security Update : the Linux Kernel (openSUSE-2018-1016)NessusSuSE Local Security Checks
high