cve/2018/CVE-2018-14625.md
2024-05-27 13:12:02 +00:00

861 B

CVE-2018-14625

Description

A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AF_VSOCK messages destined to other clients.

POC

Reference

No PoCs from references.

Github