CVE-2018-8043

Description

The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8 does not validate certain resource availability, which allows local users to cause a denial of service (NULL pointer dereference).

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.081

Associated Vulnerability

VulnerabilityOS Platform
Linux hardware enablement (HWE) kernel (USN-3468-2) linux-image-generic-hwe-16.04_4.13.0.39.58_i386.debLinux
Linux hardware enablement (HWE) kernel (USN-3468-2) linux-image-generic-hwe-16.04_4.13.0.39.58_amd64.debLinux
Linux hardware enablement (HWE) kernel (USN-3468-2) linux-image-lowlatency-hwe-16.04_4.13.0.39.58_i386.debLinux
Linux hardware enablement (HWE) kernel (USN-3468-2) linux-image-lowlatency-hwe-16.04_4.13.0.39.58_amd64.debLinux
Linux kernel (USN-3507-1) linux-image-lowlatency_4.13.0.39.42_i386.debLinux
Linux kernel for Google Cloud Platform (GCP) systems (USN-3507-2) linux-image-gcp_4.13.0.1013.15_amd64.debLinux
Linux kernel for Google Cloud Platform (GCP) systems (USN-3507-2) linux-image-gke_4.13.0.1013.15_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3581-2) linux-image-generic-hwe-16.04_4.13.0.39.58_i386.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3581-2) linux-image-generic-hwe-16.04_4.13.0.39.58_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3581-2) linux-image-lowlatency-hwe-16.04_4.13.0.39.58_i386.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-3581-2) linux-image-lowlatency-hwe-16.04_4.13.0.39.58_amd64.debLinux
Linux kernel (USN-3630-1) linux-image-generic_4.13.0.39.42_i386.debLinux
Linux kernel (USN-3630-1) linux-image-generic_4.13.0.39.42_amd64.debLinux
Linux kernel (USN-3630-1) linux-image-lowlatency_4.13.0.39.42_amd64.debLinux
Linux kernel (USN-3630-1) linux-image-4.13.0-39-generic_4.13.0-39.44_i386.debLinux
Linux kernel (USN-3630-1) linux-image-4.13.0-39-generic_4.13.0-39.44_amd64.debLinux
Linux kernel (USN-3630-1) linux-image-4.13.0-39-lowlatency_4.13.0-39.44_i386.debLinux
Linux kernel (USN-3630-1) linux-image-4.13.0-39-lowlatency_4.13.0-39.44_amd64.debLinux
Linux kernel for Google Cloud Platform (GCP) systems (USN-3630-2) linux-image-oem_4.13.0.1024.28_amd64.debLinux
Linux kernel for Google Cloud Platform (GCP) systems (USN-3630-2) linux-image-4.13.0-1013-gcp_4.13.0-1013.17_amd64.debLinux
Linux kernel for Google Cloud Platform (GCP) systems (USN-3630-2) linux-image-4.13.0-1024-oem_4.13.0-1024.27_amd64.debLinux
Linux kernel for Google Cloud Platform (GCP) systems (USN-3630-2) linux-image-4.13.0-39-generic_4.13.0-39.44~16.04.1_i386.debLinux
Linux kernel for Google Cloud Platform (GCP) systems (USN-3630-2) linux-image-4.13.0-39-generic_4.13.0-39.44~16.04.1_amd64.debLinux
Linux kernel for Google Cloud Platform (GCP) systems (USN-3630-2) linux-image-4.13.0-39-lowlatency_4.13.0-39.44~16.04.1_i386.debLinux
Linux kernel for Google Cloud Platform (GCP) systems (USN-3630-2) linux-image-4.13.0-39-lowlatency_4.13.0-39.44~16.04.1_amd64.debLinux
kernel Security Update (ALAS-2020-1480) kernel-livepatch-4.14.192-147.314-1.0-0.amzn2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234