CVE-2018-1130

Published: 10 May 2018

Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/dccp/output.c in that allows a local user to cause a denial of service by a number of certain crafted system calls.

From the Ubuntu security team

It was discovered that a null pointer dereference vulnerability existed in the DCCP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash).

Mitigation

Blacklist the dccp ipv[46] autoloading aliases by adding the following
lines to /etc/modprobe.d/blacklist-dccp.conf:
  alias net-pf-2-proto-0-type-6 off
  alias net-pf-2-proto-33-type-6 off
  alias net-pf-10-proto-0-type-6 off
  alias net-pf-10-proto-33-type-6 off

Priority

Medium

CVSS 3 base score: 5.5

Status

Notes

Introduced in fix for CVE-2017-8824

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1130
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1130
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67f93df79aeefc3add4e4b31a752600f834236e2
• https://marc.info/?l=linux-netdev&m=152036596825220&w=2
• https://syzkaller.appspot.com/bug?id=833568de043e0909b2aeaef7be136db39d21ba94
• https://ubuntu.com/security/notices/USN-3654-1
• https://ubuntu.com/security/notices/USN-3654-2
• https://ubuntu.com/security/notices/USN-3656-1
• https://ubuntu.com/security/notices/USN-3697-1
• https://ubuntu.com/security/notices/USN-3697-2
• https://ubuntu.com/security/notices/USN-3698-1
• https://ubuntu.com/security/notices/USN-3698-2
• NVD
• Launchpad
• Debian

Bugs