Out-of-bounds Read The advisory has been revoked - it doesn't affect any version of package kernel-docs-html (opens in a new tab)

Threat Intelligence

0.54% (45^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-SLES150-KERNELDOCSHTML-2759752
published14 Apr 2022
disclosed31 Oct 2018

Report a new vulnerability Found a mistake?

Introduced: 31 Oct 2018

CVE-2018-18445 (opens in a new tab) CWE-125 (opens in a new tab)

Amendment

The SLES security team deemed this advisory irrelevant for SLES:15.0.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-docs-html package and not the kernel-docs-html package as distributed by SLES.

In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.