CVE-2018-7995

MEDIUM

Linux Kernel < 4.15.7 - Denial of Service via Race Condition in store_int_with_restart

Title source: llm
STIX 2.1

Description

Race condition in the store_int_with_restart() function in arch/x86/kernel/cpu/mcheck/mce.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (panic) by leveraging root access to write to the check_interval file in a /sys/devices/system/machinecheck/machinecheck<cpu number> directory. NOTE: a third party has indicated that this report is not security relevant

References (10)

Core 10
Core References
Patch, Third Party Advisory x_refsource_misc
https://lkml.org/lkml/2018/3/2/970
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4187
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3654-1/
Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.suse.com/show_bug.cgi?id=1084755
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4188
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/103356
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3654-2/
Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3656-1/

Scores

CVSS v3 4.7
EPSS 0.0006
EPSS Percentile 19.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-362
Status published
Products (4)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
debian/debian_linux 7.0
linux/linux_kernel < 4.15.7
Published Mar 09, 2018
Tracked Since Feb 18, 2026