---
id: 8696
title: "[CVE-2018-17182] A cache invalidation bug in Linux memory management"
cve: CVE-2018-17182
source_domain: projectzero.google
source_url: "https://projectzero.google/2018/09/a-cache-invalidation-bug-in-linux.html"
published_at: "2018-09-26T00:00:00Z"
tags: ["linux", "cve", "memory-management", "project-zero", "cache-invalidation"]
phying_url: "https://phying.com/item/8696"
lang: en
---

# [CVE-2018-17182] A cache invalidation bug in Linux memory management

## Summary

This blogpost describes a way to exploit a Linux kernel bug (CVE-2018-17182) that exists since kernel version 3.16. While the bug itself is in code that is reachable even from relatively strongly sandboxed contexts, this blogpost only describes a way to exploit it in environments that use Linux kernels that haven't been configured for increased security (specifically, Ubuntu 18.04 with kernel linux-image-4.15.0-34-generic at version 4.15.0-34.37). This demonstrates how the kernel configuration can have a big impact on the difficulty of exploiting a kernel bug.

## Intelligence Metadata

- **Sources:** projectzero.google
- **CVE:** CVE-2018-17182
- **Published:** 2018-09-26T00:00:00Z
- **Original:** https://projectzero.google/2018/09/a-cache-invalidation-bug-in-linux.html
- **Phying News:** https://phying.com/item/8696