PT-2018-6732

CVE-2017-18203

·

Published

2017-12-08

·

Updated

2018-07-09

Description by

CVSS 3.1
4.7
Medium
MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.3
Description: The issue allows local users to cause a denial of service by leveraging a race condition with dm destroy during creation and removal of DM devices. This is due to a problem in the dm get from kobject function in drivers/md/dm.c.
Recommendations: For versions prior to 4.14.3, update to version 4.14.3 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')
Related identifiers
CVE-2017-18203
ALT-PU-2017-2771
ALT-PU-2018-1991
CESA-2018_1062
CESA-2018_1854
DLA-1369-1
DSA-4187-1
RHSA-2018:0676
RHSA-2018_0676
RHSA-2018:1062
RHSA-2018_1062
RHSA-2018:1854
RHSA-2018_1854
RHSA-2019:4154
SUSE-SU-2018:1080-1
SUSE-SU-2018:1172-1
SUSE-SU-2018:1220-1
SUSE-SU-2018:1221-1
SUSE-SU-2018:1309-1
USN-3619-1
USN-3619-2
USN-3653-1
USN-3653-2
USN-3655-1
USN-3655-2
USN-3657-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com