Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← back | CVE Intelligence

CVE-2018-17182

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2018-17182.

Coverage Span
2018-09-26
Reports
1 related reports

Associated Reports & Timeline

1.
[CVE-2018-17182] A cache invalidation bug in Linux memory management
projectzero.google | vulnerability | | original ↗ | #linux | #cve | #memory-management | #project-zero
This blogpost describes a way to exploit a Linux kernel bug (CVE-2018-17182) that exists since kernel version 3.16. While the bug itself is in code that is reachable even from relatively strongly sandboxed contexts, this blogpost only describes a way to exploit it in environments that use Linux kernels that haven't been configured for increased security (specifically, Ubuntu 18.04 with kernel linux-image-4.15.0-34-generic at version 4.15.0-34.37). This demonstrates how the kernel configuration can have a big impact on the difficulty of exploiting a kernel bug.