Home

CVE-2018-14646

Description

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.04

Associated Vulnerability

VulnerabilityOS Platform
Kernel security update (CESA-2018:2384) kernel-debug-3.10.0-957.1.3.el7.x86_64.rpmLinux
Kernel security update (CESA-2018:2384) kernel-debug-devel-3.10.0-957.1.3.el7.x86_64.rpmLinux
Kernel security update (CESA-2018:3651) perf-3.10.0-957.1.3.el7.x86_64.rpmLinux
Kernel security update (CESA-2018:3651) kernel-3.10.0-957.1.3.el7.x86_64.rpmLinux
Kernel security update (CESA-2018:3651) bpftool-3.10.0-957.1.3.el7.x86_64.rpmLinux
Kernel security update (CESA-2018:3651) python-perf-3.10.0-957.1.3.el7.x86_64.rpmLinux
Kernel security update (CESA-2018:3651) kernel-debug-3.10.0-957.1.3.el7.x86_64.rpmLinux
Kernel security update (CESA-2018:3651) kernel-devel-3.10.0-957.1.3.el7.x86_64.rpmLinux
Kernel security update (CESA-2018:3651) kernel-tools-3.10.0-957.1.3.el7.x86_64.rpmLinux
Kernel security update (CESA-2018:3651) kernel-headers-3.10.0-957.1.3.el7.x86_64.rpmLinux
Kernel security update (CESA-2018:3651) kernel-tools-libs-3.10.0-957.1.3.el7.x86_64.rpmLinux
Kernel security update (CESA-2018:3651) kernel-debug-devel-3.10.0-957.1.3.el7.x86_64.rpmLinux
Kernel security update (CESA-2018:3651) kernel-tools-libs-devel-3.10.0-957.1.3.el7.x86_64.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update bpftool-3.10.0-957.1.3.el7.x86_64.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update kernel-3.10.0-957.1.3.el7.x86_64.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update kernel-abi-whitelists-3.10.0-957.1.3.el7.noarch.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update kernel-debug-3.10.0-957.1.3.el7.x86_64.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update kernel-debug-devel-3.10.0-957.1.3.el7.x86_64.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update kernel-devel-3.10.0-957.1.3.el7.x86_64.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update kernel-doc-3.10.0-957.1.3.el7.noarch.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update kernel-headers-3.10.0-957.1.3.el7.x86_64.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update kernel-tools-3.10.0-957.1.3.el7.x86_64.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update kernel-tools-libs-3.10.0-957.1.3.el7.x86_64.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update kernel-tools-libs-devel-3.10.0-957.1.3.el7.x86_64.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update perf-3.10.0-957.1.3.el7.x86_64.rpmLinux
(RHSA-2018:3651) kernel security, bug fix, and enhancement update python-perf-3.10.0-957.1.3.el7.x86_64.rpmLinux
(CESA-2018:3651) kernel security, bug fix, and enhancement update bpftool-3.10.0-957.1.3.el7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234