CVE-2018-14619
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The ...
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
- Record
CVE-2018-14619- CVSS 3.0
- 6.2 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
EUVDEUVD-2018-6526
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
- Record
EUVD-2018-6526- CVSS 3.0
- 6.2 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r8cr-q337-j896
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The ...
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
- Record
GHSA-r8cr-q337-j896- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
- Record
CVE-2018-14619- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 6.2 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-416, CWE-20
- Updated
- 2026-11-02
OSV
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
- Record
CVE-2018-14619- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-14619
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
- Record
DEBIAN-CVE-2018-14619- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:2948
Red Hat Security Advisory: kernel-alt security, bug fix, and enhancement update
- Record
RHSA-2018:2948- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-14619
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
- Record
UBUNTU-CVE-2018-14619- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 6.2 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 4.14.12-1 | 4.14.12-1 |
linuxDebian:13 |
before 4.14.12-1 | 4.14.12-1 |
linuxDebian:14 |
before 4.14.12-1 | 4.14.12-1 |
kernelRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-altRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-bootwrapperRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-debugRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-develRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-docRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-headersRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-toolsRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-tools-libsRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
perfRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
python-perfRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
python-perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-debug-develRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
kernel-tools-libs-develRed Hat:enterprise_linux:7::server From an advisory covering 42 CVEs |
before 0:4.14.0-115.el7a | 0:4.14.0-115.el7a |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-14619 is a medium vulnerability (CVSS 6.2) in [unknown] Kernel, published August 30, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in linux 4.14.12-1.
References
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=b32a7dc8aef1882fbf983eb354837488cc9d54dc
access.redhat.com/errata/RHSA-2018:2948
psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0013
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14619
securityfocus.com/bid/105200
nvd.nist.gov/vuln/detail/CVE-2018-14619
Show 188 moreShow less
github.com/advisories/GHSA-r8cr-q337-j896
security-tracker.debian.org/tracker/CVE-2018-14619
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2948.json
cve.org/CVERecord?id=CVE-2017-13166
lwn.net/Articles/618064
kernel.org/doc/Documentation/filesystems/dax.txt
seclists.org/oss-sec/2018/q2/122
bugs.chromium.org/p/project-zero/issues/detail?id=1528
software.intel.com/sites/default/files/managed/b9/f9/336983-Intel-Analysis-of-Speculative-Execution-Side-Channels-White-Paper.pdf
intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
kb.cert.org/vuls/id/962459
spinics.net/lists/netdev/msg514742.html
ubuntu.com/security/CVE-2018-14619
openwall.com/lists/oss-security/2018/08/28/1