VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel.
Advisory: CVE-2018-5333
Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2018-5333
CVSS severity score: 4.9/10.0
Description:
In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.
This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.
Comment 1 by groeck@chromium.org
, Jan 30 2018Labels: Security_Severity-Medium Security_Impact-None Pri-3
Owner: groeck@chromium.org
Status: WontFix (was: Untriaged)
Upstream commit 44496521c6bd ("RDS: null pointer dereference in rds_atomic_free_op". Systems are only affected if CONFIG_RDS is enabled, which is not the case for any Chrome OS images. Already fixed in chromeos-4.14 and chromeos-4.4; won't fix in older releases, and won't cherry-pick to stable releases.