FlawAtlas
Search the atlas
USN-3901-1 Not scored

linux, linux-aws, linux-gcp, linux-kvm, linux-oem, linux-oracle, linux-raspi2 vulnerabilities

Jann Horn discovered that the userfaultd implementation in the Linux kernel did not properly restrict access to certain ioctls. A local attacker could use this possibly to modify files. (CVE-2018-18397) It was discovered that the crypto subsystem of the Linux kernel leaked uninitialized memory to user space in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-19854) Jann Horn discovered a race condition in the fork() system call in the Linux kernel. A local attacker could use this to gain access to services that cache authorizations. (CVE-2019-6133)

Exploit probability Not scored
Published March 5, 2019
Required by Not available
Last source change April 22, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:18.04:LTS linux

25 explicit affected versions

Ubuntu:18.04:LTS linux-aws

19 explicit affected versions

Ubuntu:18.04:LTS linux-gcp

18 explicit affected versions

Ubuntu:18.04:LTS linux-kvm

19 explicit affected versions

Ubuntu:18.04:LTS linux-oem

16 explicit affected versions

Ubuntu:18.04:LTS linux-oracle

2 explicit affected versions

Ubuntu:18.04:LTS linux-raspi2

21 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities USN-3901-1

Jann Horn discovered that the userfaultd implementation in the Linux kernel did not properly restrict access to certain ioctls. A local attacker could use this possibly to modify files. (CVE-2018-18397) It was discovered that the crypto subsystem of the Linux kernel leaked uninitialized memory to user space in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-19854) Jann Horn discovered a race condition in the fork() system call in the Linux kernel. A local attacker could use this to gain access to services that cache authorizations. (CVE-2019-6133)

View original source

05 / REFERENCES

Further evidence