CVE-2018-8043

The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8 does not validate certain resource availability, which allows local users to cause a denial of service (NULL pointer dereference).
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

History

21 Nov 2024, 04:13

Type Values Removed Values Added
References () http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=297a6961ffb8ff4dc66c9fbf53b924bd1dda05d5 - Patch, Vendor Advisory () http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=297a6961ffb8ff4dc66c9fbf53b924bd1dda05d5 - Patch, Vendor Advisory
References () http://www.securitytracker.com/id/1040749 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1040749 - Third Party Advisory, VDB Entry
References () https://github.com/torvalds/linux/commit/297a6961ffb8ff4dc66c9fbf53b924bd1dda05d5 - Patch, Third Party Advisory () https://github.com/torvalds/linux/commit/297a6961ffb8ff4dc66c9fbf53b924bd1dda05d5 - Patch, Third Party Advisory
References () https://usn.ubuntu.com/3619-1/ - Third Party Advisory () https://usn.ubuntu.com/3619-1/ - Third Party Advisory
References () https://usn.ubuntu.com/3619-2/ - Third Party Advisory () https://usn.ubuntu.com/3619-2/ - Third Party Advisory
References () https://usn.ubuntu.com/3630-1/ - Third Party Advisory () https://usn.ubuntu.com/3630-1/ - Third Party Advisory
References () https://usn.ubuntu.com/3630-2/ - Third Party Advisory () https://usn.ubuntu.com/3630-2/ - Third Party Advisory
References () https://usn.ubuntu.com/3632-1/ - Third Party Advisory () https://usn.ubuntu.com/3632-1/ - Third Party Advisory

Information

Published : 2018-03-10 22:29

Updated : 2024-11-21 04:13


NVD link : CVE-2018-8043

Mitre link : CVE-2018-8043

CVE.ORG link : CVE-2018-8043


JSON object : View

Products Affected

canonical

  • ubuntu_linux

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference