ZeroHour

CVE-2018-14734

CVSS 3.0
7.8 high
EPSS
<1%p45
Published
()
Modified
Description

drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free).

Vendors
linuxcanonicaldebian
Products
linux kernel, ubuntu linux, debian linux
Weakness
CWE-416
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.