drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucmaleavemulticast to access a certain data structure after a cleanup step in ucmaprocessjoin, which allows attackers to cause a denial of service (use-after-free).
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-14734.json"
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@cb2595c1393b4a5211534e6f0a0fbad369e21ad8",
"signature_type": "Function",
"digest": {
"function_hash": "84251835500158473963762075935387451780",
"length": 1408.0
},
"deprecated": false,
"target": {
"file": "drivers/infiniband/core/ucma.c",
"function": "ucma_process_join"
},
"id": "CVE-2018-14734-43b8142a",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@cb2595c1393b4a5211534e6f0a0fbad369e21ad8",
"signature_type": "Function",
"digest": {
"function_hash": "289355788430900724396027297164120763129",
"length": 410.0
},
"deprecated": false,
"target": {
"file": "drivers/infiniband/core/ucma.c",
"function": "ucma_alloc_multicast"
},
"id": "CVE-2018-14734-6a88f53c",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@cb2595c1393b4a5211534e6f0a0fbad369e21ad8",
"signature_type": "Line",
"digest": {
"line_hashes": [
"322895981688665915593811218446246320572",
"77645043527091044002054938639826807452",
"163196720215827032947354953570090462934",
"294215768336346437094495793101757999649",
"70966381732134970199606875142247550422",
"337135602638631902834181762091107727950",
"101365507607698894536020065283896509305"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "drivers/infiniband/core/ucma.c"
},
"id": "CVE-2018-14734-cb552665",
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-14734.json"
[
{
"source": "https://github.com/torvalds/linux/commit/cb2595c1393b4a5211534e6f0a0fbad369e21ad8",
"signature_type": "Function",
"digest": {
"function_hash": "289355788430900724396027297164120763129",
"length": 410.0
},
"deprecated": false,
"target": {
"file": "drivers/infiniband/core/ucma.c",
"function": "ucma_alloc_multicast"
},
"id": "CVE-2018-14734-434d4389",
"signature_version": "v1"
},
{
"source": "https://github.com/torvalds/linux/commit/cb2595c1393b4a5211534e6f0a0fbad369e21ad8",
"signature_type": "Function",
"digest": {
"function_hash": "84251835500158473963762075935387451780",
"length": 1408.0
},
"deprecated": false,
"target": {
"file": "drivers/infiniband/core/ucma.c",
"function": "ucma_process_join"
},
"id": "CVE-2018-14734-945ead4c",
"signature_version": "v1"
},
{
"source": "https://github.com/torvalds/linux/commit/cb2595c1393b4a5211534e6f0a0fbad369e21ad8",
"signature_type": "Line",
"digest": {
"line_hashes": [
"322895981688665915593811218446246320572",
"77645043527091044002054938639826807452",
"163196720215827032947354953570090462934",
"294215768336346437094495793101757999649",
"70966381732134970199606875142247550422",
"337135602638631902834181762091107727950",
"101365507607698894536020065283896509305"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "drivers/infiniband/core/ucma.c"
},
"id": "CVE-2018-14734-d710563e",
"signature_version": "v1"
}
]