CVE:CVE-2018-18445
CNNVD:CNNVD-201810-995
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel中的BPF verifier存在安全漏洞，该漏洞源于程序没有正确的计算数值的边界。攻击者可利用该漏洞造成越边界内存访问。以下版本受到影响：Linux kernel 4.14.x版本，4.15.x版本，4.16.x版本，4.17.x版本，4.18.13之前的4.18.x版本。
solution:Upgrade linux linux_kernel to a higher version than 4.14.75,4.18.13,and avoid the version [4.14.9,4.14.75),[4.15,4.18.13); Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,7.6,and avoid the version 7.0,7.6; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0