CVE-2018-14619: linux linux_kernel Use After Free
Vulnerability summary
CVE-2018-14619 is a high (CVSS 7.8) Use After Free vulnerability in linux linux_kernel. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 35.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 30-08-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
CVSS metrics
7 scores · 4 sources · 3 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST6.2MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.43%
Chance of exploitation in the next 30 days
Percentile
35%
Versus all other CVEs
30-day change
0.00 pp
From 0.43% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
- CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Affected systems
Ubuntu8 products
- linux< 4.15.0-10.11
- linux-aws< 4.15.0-1001.1
- linux-azure< 4.15.0-1023.24~14.04.1 | < 4.15.0-1013.13~16.04.2 | < 4.15.0-1002.2
- linux-gcp< 4.15.0-1014.14~16.04.1 | < 4.15.0-1001.1
- linux-hwe< 4.15.0-24.26~16.04.1
[unknown]1 product
- kernelkernel-4.15-rc4
Debian1 product
- linux< 4.14.12-1
Linux1 product
- linux_kernel≥ 4.14, < 4.14.8 | 4.15:rc1 | 4.15:rc2 | 4.15:rc3
4 vendors · 11 products
References
10 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14619X Refsource CONFIRMIssue TrackingThird Party Advisory
