CVE-2018-17972

An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11

published October 3, 2018

CVSS
—
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.1th percentile
Published
2018-10-03T22:00Z
EPSS history
Timeline
  • 03 OCT 22:00Z
    An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11
    cvelistv5