https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 02:07:29 +0000 https://cve.radiocsirt.org/vuln/cve-2018-18397 <p>The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains holes), related to fs/userfaultfd.c and mm/userfaultfd.c.</p> <p>The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains holes), related to fs/userfaultfd.c and mm/userfaultfd.c.</p> https://cve.radiocsirt.org/vuln/cve-2018-18397 https://cve.radiocsirt.org/vuln/usn-3901-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: linux, Ubuntu:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-kvm, Ubuntu:18.04:LTS: linux-oem, Ubuntu:18.04:LTS: linux-oracle, Ubuntu:18.04:LTS: linux-raspi2</p> <p>Jann Horn discovered that the userfaultd implementation in the Linux kernel did not properly restrict access to certain ioctls. A local attacker could use this possibly to modify files. (CVE-2018-18397)</p> <p>It was discovered that the crypto subsystem of the Linux kernel leaked uninitialized memory to user space in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-19854)</p> <p>Jann Horn discovered a race condition in the fork() system call in the Linux kernel. A local attacker could use this to gain access to services that cache authorizations. (CVE-2019-6133)</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: linux, Ubuntu:18.04:LTS: linux-aws, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-kvm, Ubuntu:18.04:LTS: linux-oem, Ubuntu:18.04:LTS: linux-oracle, Ubuntu:18.04:LTS: linux-raspi2</p> <p>Jann Horn discovered that the userfaultd implementation in the Linux kernel did not properly restrict access to certain ioctls. A local attacker could use this possibly to modify files. (CVE-2018-18397)</p> <p>It was discovered that the crypto subsystem of the Linux kernel leaked uninitialized memory to user space in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-19854)</p> <p>Jann Horn discovered a race condition in the fork() system call in the Linux kernel. A local attacker could use this to gain access to services that cache authorizations. (CVE-2019-6133)</p> https://cve.radiocsirt.org/vuln/usn-3901-1