The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | * | 4.14 (including) |
| Linux_kernel | Linux | 4.15-rc1 (including) | 4.15-rc1 (including) |
| Linux_kernel | Linux | 4.15-rc2 (including) | 4.15-rc2 (including) |
| Linux_kernel | Linux | 4.15-rc3 (including) | 4.15-rc3 (including) |
| Linux_kernel | Linux | 4.15-rc4 (including) | 4.15-rc4 (including) |
| Linux_kernel | Linux | 4.15-rc5 (including) | 4.15-rc5 (including) |
| Linux_kernel | Linux | 4.15-rc6 (including) | 4.15-rc6 (including) |
| Linux_kernel | Linux | 4.15-rc7 (including) | 4.15-rc7 (including) |