VDB

DEBIAN-CVE-2018-14625

DEBIAN-CVE-2018-14625 PUBLISHED CVSS 7 HIGH

A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AF_VSOCK messages destined to other clients.

Risk Scores

CVSS 3.0
7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:12linux0, 0, 0
Debian:13linux0, 0, 0
Debian:11linux0, 0, 0
Debian:14linux0, 0, 0

Timeline

  • Sep 10, 2018 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›