You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file.
CVE-2018-7757 - Medium Severity Vulnerability
Vulnerable Library - linuxv3.10
Linux kernel source tree
Library home page: https://github.com/torvalds/linux.git
Found in HEAD commit: 439d18b77a020411b95770ba08a9229eed466cde
Found in base branch: xsentinel-1.6-clean
Vulnerable Source Files (2)
android_kernel_samsung_j7xlte/drivers/scsi/libsas/sas_expander.c
android_kernel_samsung_j7xlte/drivers/scsi/libsas/sas_expander.c
Vulnerability Details
Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file.
Publish Date: 2018-03-08
URL: CVE-2018-7757
CVSS 3 Score Details (5.5)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2018-7757
Release Date: 2018-03-08
Fix Resolution: v4.16-rc1
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: