VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel.
Advisory: CVE-2018-7492
Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2018-7492
CVSS severity score: 4.9/10.0
Description:
A NULL pointer dereference was found in the net/rds/rdma.c __rds_rdma_map() function in the Linux kernel before 4.14.7 allowing local attackers to cause a system panic and a denial-of-service, related to RDS_GET_MR and RDS_GET_MR_FOR_DEST.
This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.
Comment 1 by groeck@chromium.org
, Mar 17 2018Labels: Security_Severity-Medium Security_Impact-None Pri-3
Owner: groeck@chromium.org
Status: WontFix (was: Untriaged)
Upstream commit f3069c6d33f6ae ("rds: Fix NULL pointer dereference in __rds_rdma_map"). Fixed in chromeos-4.14 with merge of v4.14.7. Fixed in chromeos-4.4 with merge of v4.4.106. CONFIG_RDS is not enabled in ChromeOS images; WontFix for older kernels.