{"id":"CVE-2018-14619","aliases":["DEBIAN-CVE-2018-14619","EUVD-2018-6526","GHSA-r8cr-q337-j896","RHSA-2018:2948","UBUNTU-CVE-2018-14619"],"status":"published","title":"A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The ...","description":"A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The \"null skcipher\" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.","severity":{"version":"3.0","score":6.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00426,"percentile":0.37129,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-416"],"published":"2018-08-30T12:00:00Z","modified":"2026-10-23T18:02:59Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.14.12-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.14.12-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.14.12-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.12-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.12-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.12-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-alt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0-115.el7a"}]}],"bundled":42}],"products":[{"vendor":"[unknown]","product":"kernel"},{"vendor":"linux","product":"kernel"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b32a7dc8aef1882fbf983eb354837488cc9d54dc","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","article"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2948","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0013","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14619","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"http://www.securityfocus.com/bid/105200","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14619","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-r8cr-q337-j896"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-14619","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/articles/3553061","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/ssbd","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index","tags":["article"]},{"url":"https://access.redhat.com/articles/3658021","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1516257","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1528312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1528323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1533909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1539508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1539706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1541846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1547824","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1548412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1550142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1551051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1551565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1552048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1553361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1571062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1571623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1575472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1589324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1629636","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2948.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-16648","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-16648","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16648","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-17805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-17806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17806","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18075","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18075","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18075","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18208","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18208","tags":["advisory"]},{"url":"https://lwn.net/Articles/618064/","tags":["article"]},{"url":"https://www.kernel.org/doc/Documentation/filesystems/dax.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18344","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18344","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18344","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1065","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1065","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1068","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1068","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1068","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1092","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1092","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1094","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1094","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1094","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1095","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1095","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1118","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1118","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1118","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1120","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1120","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1120","tags":["advisory"]},{"url":"http://seclists.org/oss-sec/2018/q2/122","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-3639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3639","tags":["advisory"]},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1528","tags":["article"]},{"url":"https://software.intel.com/sites/default/files/managed/b9/f9/336983-Intel-Analysis-of-Speculative-Execution-Side-Channels-White-Paper.pdf","tags":["article"]},{"url":"https://software.intel.com/sites/default/files/managed/c5/63/336996-Speculative-Execution-Side-Channel-Mitigations.pdf","tags":["article"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5344","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5344","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5344","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5390","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5390","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5390","tags":["advisory"]},{"url":"https://www.kb.cert.org/vuls/id/962459","tags":["advisory"]},{"url":"https://www.spinics.net/lists/netdev/msg514742.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5391","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5391","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5391","tags":["advisory"]},{"url":"https://www.kb.cert.org/vuls/id/641765","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5803","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5803","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5803","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5848","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5848","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5848","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7566","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7566","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7566","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7757","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7757","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8781","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8781","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8781","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9363","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10322","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10322","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10877","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10877","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10878","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10878","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10878","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10879","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10879","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10880","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10880","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10880","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10881","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10881","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10882","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10882","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10882","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10883","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10883","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10940","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10940","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10940","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11506","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11506","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11506","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12232","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12232","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12232","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-13405","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-13405","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13405","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14619","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14619","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14641","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14641","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14641","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000026","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000026","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000026","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000200","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000200","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000200","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000204","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-14619","tags":["report"]},{"url":"https://git.kernel.org/linus/b32a7dc8aef1882fbf983eb354837488cc9d54dc","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2018/08/28/1","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-14619","description":"A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The \"null skcipher\" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.","status":"published","published":"2018-08-30T12:00:00Z","modified":"2024-08-05T09:29:51.723Z","cvss":[{"version":"3.0","score":6.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:35:00.589142Z"}],"euvd":[{"id":"EUVD-2018-6526","description":"A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The \"null skcipher\" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.","status":"published","published":"2018-08-30T12:00:00Z","modified":"2024-08-05T09:29:51Z","cvss":[{"version":"3.0","score":6.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T02:39:46.259365Z"}],"ghsa":[{"id":"GHSA-r8cr-q337-j896","title":"A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The ...","description":"A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The \"null skcipher\" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.","status":"published","published":"2022-05-13T01:34:32Z","modified":"2023-02-01T05:08:29Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:50:46.771353Z"}],"nvd":[{"id":"CVE-2018-14619","description":"A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The \"null skcipher\" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.","status":"published","published":"2018-08-30T12:29:01.407Z","modified":"2026-06-17T01:41:18.25Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":6.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-416","CWE-20"],"updated_at":"2026-11-02T14:04:36.842579Z"}],"osv":[{"id":"CVE-2018-14619","description":"A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The \"null skcipher\" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.","status":"published","published":"2018-08-30T12:29:01.407Z","modified":"2026-03-15T22:19:06.509095Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"DEBIAN-CVE-2018-14619","description":"A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The \"null skcipher\" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.","status":"published","published":"2018-08-30T12:29:01.407Z","modified":"2026-10-23T18:02:59.612206515Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"RHSA-2018:2948","title":"Red Hat Security Advisory: kernel-alt security, bug fix, and enhancement update","status":"published","published":"2024-09-29T17:19:24Z","modified":"2026-07-01T10:04:45Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-14619","description":"A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The \"null skcipher\" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.","status":"withdrawn","published":"2018-08-30T12:29:00Z","modified":"2025-07-16T07:38:01.944109Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":6.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.014176Z"}]}}