TI-2018-10499 CVE-2018-14634 · GHSA-4994-8w6g-9jvw
Integer overflow in backstage kernel
Priority CRITICAL 93KEV
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.
kernel security and bug fix update
Released 2018-10-17 · Red Hat rating Important · View on Red Hat →
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.