CVE-2018-5332

In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a…

published January 11, 2018

CVSS
—
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00452 · 38.3th percentile
Published
2018-01-11T07:00Z
EPSS history
Timeline
  • 11 JAN 07:00Z
    In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a…
    cvelistv5