CVE-2018-8087
MediumMemory leak in the hwsim_new_radio_nl function in drivers/net/wireless/mac80211_hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial of service (memory consumption) by triggering an out-of-array error case.
CVSS 3.0 score
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness type
CWE-772CVE-2018-8087 is a Missing Release of Resource after Effective Lifetime vulnerability
What is Missing Release of Resource after Effective Lifetime?
The product does not release a resource after its effective lifetime has ended. Learn more on MITRE CWE
References
The following references provide additional information about CVE-2018-8087 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
Securityfocushttp://www.securityfocus.com/bid/103397Third Party Advisory VDB Entry
-
-
-
Ubuntu Securityhttps://usn.ubuntu.com/3676-1/Third Party Advisory
-
Ubuntu Securityhttps://usn.ubuntu.com/3676-2/Third Party Advisory
-
Ubuntu Securityhttps://usn.ubuntu.com/3677-1/Third Party Advisory
-
Ubuntu Securityhttps://usn.ubuntu.com/3677-2/Third Party Advisory
-
Ubuntu Securityhttps://usn.ubuntu.com/3678-1/Third Party Advisory
-
Ubuntu Securityhttps://usn.ubuntu.com/3678-2/Third Party Advisory
-
Ubuntu Securityhttps://usn.ubuntu.com/3678-3/Third Party Advisory
-
Ubuntu Securityhttps://usn.ubuntu.com/3678-4/Third Party Advisory
-
Debian Securityhttps://www.debian.org/security/2018/dsa-4188Third Party Advisory
-
PatchKernel patch commithttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0ddcff49b672239dda94d70d0fcf50317a9f4b51
-
PatchKernel patch commithttps://github.com/torvalds/linux/commit/0ddcff49b672239dda94d70d0fcf50317a9f4b51
Frequently asked questions
-
What is CVE-2018-8087?
CVE-2018-8087 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 , classified as a Missing Release of Resource after Effective Lifetime flaw (CWE-772) . CVE-2018-8087 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2018-8087?
CVE-2018-8087 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.0). The vector string is
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. -
Is there a patch available for CVE-2018-8087?
No patch is currently available for CVE-2018-8087. Monitor the NIST NVD and your Linux distribution's security advisories for updates.
-
Is CVE-2018-8087 actively exploited?
No — CVE-2018-8087 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.
-
What is Missing Release of Resource after Effective Lifetime (CWE-772)?
The product does not release a resource after its effective lifetime has ended. View CWE-772 on MITRE CWE →