CVE-2018-7566

Impact:
Moderate
Public Date:
2018-02-14
CWE:
CWE-362
Bugzilla:
1550142: CVE-2018-7566 kernel: race condition in snd_seq_write() may lead to UAF or OOB-access
ALSA sequencer core initializes the event pool on demand by invoking snd_seq_pool_init() when the first write happens and the pool is empty. A user can reset the pool size manually via ioctl concurrently, and this may lead to UAF or out-of-bound access.

Find out more about CVE-2018-7566 from the MITRE CVE dictionary dictionary and NIST NVD.

Statement

This issue does not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5.

This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 6, 7, its real-time kernel, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.

CVSS v3 metrics

CVSS3 Base Score 6.1
CVSS3 Base Metrics CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity Impact Low
Availability Impact High

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 7 (kernel) RHSA-2018:2384 2018-08-14
Red Hat MRG Grid for RHEL 6 Server v.2 (kernel-rt) RHSA-2019:1487 2019-06-17
Red Hat Enterprise Linux 6 (kernel) RHSA-2018:2390 2018-08-14
Red Hat Enterprise Linux for Real Time for NFV (v. 7) (kernel-rt) RHSA-2018:2395 2018-08-14
Red Hat Enterprise Linux Extended Update Support 7.4 (kernel) RHSA-2019:1483 2019-06-17
Red Hat Enterprise Linux 7 (kernel-alt) RHSA-2018:2948 2018-10-30

Affected Packages State

Platform Package State
Red Hat Enterprise Linux 8 kernel Not affected
Red Hat Enterprise Linux 5 kernel Not affected
Last Modified