CVE-2017-18203 (NVD)

2018-02-27

The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices.

Products Linux_kernel
Type Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CWE-362)
First patch https://github.com/torvalds/linux/commit/b9a41d21dceadf8104812626ef85dc56ee8a60ed
Relevant file/s ./drivers/md/dm.c (modified, +8, -4)
Links • https://usn.ubuntu.com/3619-1/
• https://usn.ubuntu.com/3653-1/
• https://access.redhat.com/errata/RHSA-2018:1854
• https://access.redhat.com/errata/RHSA-2018:1062
• https://usn.ubuntu.com/3653-2/

linux - Tree: b9a41d21dc

(? files)

Filter Settings
Files
Navigation
Patch data:

(on by default)

Patched area: