PT-2018-3511
CVE-2018-1000199
·
Published
2018-05-01
·
Updated
2020-09-04
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Linux Kernel version 3.18
Description:
The issue is related to a dangerous feature vulnerability in the
modify user hw breakpoint() function, which can lead to a crash and possibly memory corruption. This can be exploited via local code execution and the ability to use ptrace. The vulnerability is associated with incorrect error handling.Recommendations:
For Linux Kernel version 3.18, consider applying the fix from git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f to resolve the issue. As a temporary workaround, consider restricting the use of
ptrace to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾