CVE-2018-14646

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.15-rc8

Description The issue is related to a NULL pointer dereference bug in the netlink ns capable() function, located in the net/netlink/af netlink.c file. A local attacker could exploit this bug when a net namespace with a netnsid is assigned, potentially causing a kernel panic and a denial of service.

Recommendations For Linux kernel versions prior to 4.15-rc8, update to version 4.15-rc8 or later to resolve the issue. As a temporary workaround, consider restricting access to the netlink ns capable() function to minimize the risk of exploitation.