Skip to content
OpenAdvisories
High · 7.8 CVE-2018-10902 EUVD-2018-2959GHSA-fw8c-q6fq-37rg

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in sn…

Published Aug 21, 2018 · Updated Jul 7, 2026 · Assigned by redhat

Description

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.

Affected products

VendorProductAffectedFixed
Linux Linux — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 4.17.15-1 —
Debian 13 linux 4.17.15-1 —
Debian 12 linux 4.17.15-1 —
Debian 9 linux 4.9.110-3+deb9u5 DSA-4308-1
Debian 8 linux 3.16.59-1 DLA-1529-1
Debian 8 linux-4.9 4.9.110-3+deb9u5~deb8u1 DLA-1531-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +3 No fix yet —
Ubuntu 18.04 LTS linux 4.15.0-43.46 USN-3847-1
Ubuntu 18.04 LTS linux-aws 4.15.0-1031.33 USN-3847-1
Ubuntu 18.04 LTS linux-azure 4.15.0-1036.38 USN-3847-1
Ubuntu 18.04 LTS linux-gcp 4.15.0-1026.27 USN-3847-1
Ubuntu 18.04 LTS linux-kvm 4.15.0-1028.28 USN-3847-1
Ubuntu 18.04 LTS linux-oem 4.15.0-1030.35 USN-3847-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1030.32 USN-3847-1
Ubuntu 16.04 LTS linux 4.4.0-137.163 USN-3776-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1069.79 USN-3776-1
Ubuntu 16.04 LTS linux-aws-hwe 4.15.0-1031.33~16.04.1 USN-3847-2
Ubuntu 16.04 LTS linux-azure 4.15.0-1036.38~16.04.1 USN-3847-2
Ubuntu 16.04 LTS linux-gcp 4.15.0-1026.27~16.04.1 USN-3847-2
Ubuntu 16.04 LTS linux-hwe 4.15.0-43.46~16.04.1 USN-3847-2
Ubuntu 16.04 LTS linux-kvm 4.4.0-1035.41 USN-3776-1
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1098.106 USN-3776-1
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1102.107 USN-3776-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS linux 3.13.0-164.214 USN-3849-1
Ubuntu 14.04 LTS linux-aws 4.4.0-1031.34 USN-3776-2
Ubuntu 14.04 LTS linux-azure 4.15.0-1036.38~14.04.2 USN-3847-3
Ubuntu 14.04 LTS linux-lts-xenial 4.4.0-137.163~14.04.1 USN-3776-2
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1008.10 —
ReleasePackageFixed inAdvisory
RHEL 7 kernel-alt 4.14.0-115.14.1.el7a RHSA-2019:3217
RHEL 7 kernel-rt +10 3.10.0-957.rt56.910.el7 RHSA-2018:3096
RHEL 7 perf +18 3.10.0-957.el7 RHSA-2019:3217, RHSA-2018:3083
RHEL 6 perf +16 2.6.32-754.11.1.el6 RHSA-2019:0415
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7.5 EUS perf +18 3.10.0-862.44.2.el7 RHSA-2019:3967
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.46.1.rt56.639.el6rt RHSA-2019:0641
ReleasePackageFixed inAdvisory
SLES 15 kernel-azure +2 4.12.14-5.16.1 SUSE-SU-2018:3961-1
SLES 15 kernel-docs +6 4.12.14-25.16.1 SUSE-SU-2018:2539-1
SLES 15 lttng-modules 2.10.0-5.6.1 SUSE-SU-2018:2539-1
SLES 12 SP3 kernel-azure +3 4.4.155-4.16.1 SUSE-SU-2018:2858-1
SLES 12 SP3 kernel-docs +4 4.4.155-94.50.1 SUSE-SU-2021:0452-1, SUSE-SU-2018:2776-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_37 1-4.3.1 SUSE-SU-2021:0452-1
SLES 12 SP2 kernel-syms +2 4.4.121-92.95.1 SUSE-SU-2018:3084-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_13 12-2.1 SUSE-SU-2018:2860-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_14 +1 10-2.1 SUSE-SU-2018:2860-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_16 +1 9-2.1 SUSE-SU-2018:2860-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_18 +1 7-2.1 SUSE-SU-2018:2860-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_20 6-2.1 SUSE-SU-2018:2864-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_21 +1 5-2.1 SUSE-SU-2018:2864-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_23 +1 3-2.1 SUSE-SU-2018:2864-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_25 1-3.4.1 SUSE-SU-2018:3084-1
SLES 12 SP2 lttng-modules 2.7.1-9.6.1 SUSE-SU-2018:3084-1
SLES 12 SP1 kernel-xen +3 3.12.74-60.64.104.1 SUSE-SU-2018:2908-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_21 11-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_22 9-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_23 8-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_24 +2 7-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_27 5-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_28 +1 4-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_30 3-2.1 SUSE-SU-2018:2960-1
SLES 12 kernel-ec2 +4 3.12.61-52.146.1 SUSE-SU-2018:3083-1, SUSE-SU-2018:2908-1
SLES 12 kgraft-patch-SLE12_Update_27 11-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_28 +1 9-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_30 +2 8-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_33 7-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_34 5-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_35 +1 4-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_37 3-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_38 1-1.5.1 SUSE-SU-2018:3083-1
Show 17 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 11 SP4 kernel-ec2 +9 3.0.101-108.71.1 SUSE-SU-2018:2879-1
SLES 11 SP3 kernel-ec2 +7 3.0.101-0.47.106.50.1 SUSE-SU-2018:2907-1
SLES for SAP 12 SP3 kernel-azure +2 4.4.155-4.16.1 SUSE-SU-2018:2858-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.155-94.50.1 SUSE-SU-2021:0452-1, SUSE-SU-2018:2776-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_37 1-4.3.1 SUSE-SU-2021:0452-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.95.1 SUSE-SU-2018:3084-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_13 12-2.1 SUSE-SU-2018:2860-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_14 +1 10-2.1 SUSE-SU-2018:2860-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_16 +1 9-2.1 SUSE-SU-2018:2860-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_18 +1 7-2.1 SUSE-SU-2018:2860-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_20 6-2.1 SUSE-SU-2018:2864-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_21 +1 5-2.1 SUSE-SU-2018:2864-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_23 +1 3-2.1 SUSE-SU-2018:2864-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_25 1-3.4.1 SUSE-SU-2018:3084-1
SLES for SAP 12 SP2 lttng-modules 2.7.1-9.6.1 SUSE-SU-2018:3084-1
SLES for SAP 12 SP1 kernel-xen +3 3.12.74-60.64.104.1 SUSE-SU-2018:2908-2
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_21 11-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_22 9-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_23 8-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_24 +2 7-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_27 5-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_28 +1 4-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_30 3-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_31 1-2.5.1 SUSE-SU-2018:2908-2
SLES for SAP 11 SP4 kernel-ec2 +8 3.0.101-108.71.1 SUSE-SU-2018:2879-1
SLE Real Time 12 SP3 kernel-rt +3 4.4.155-3.23.1 SUSE-SU-2018:2862-1
SLE Real Time 11 SP4 kernel-rt +3 3.0.101.rt130-69.36.1 SUSE-SU-2018:3088-1
SLE Live Patching 15 kernel-default 4.12.14-25.16.1 SUSE-SU-2018:2538-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_0 4-10.2 SUSE-SU-2018:2940-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_1 4-2.1 SUSE-SU-2018:2940-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_4 1-1.3.1 SUSE-SU-2018:2538-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_10 +1 6-2.1 SUSE-SU-2018:2961-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_12 +1 4-2.1 SUSE-SU-2018:2961-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_14 +1 3-2.1 SUSE-SU-2018:2963-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_16 2-2.1 SUSE-SU-2018:2961-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_17 1-4.3.1 SUSE-SU-2018:2775-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_2 +1 11-2.1 SUSE-SU-2018:3029-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_4 10-2.1 SUSE-SU-2018:2962-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_5 +2 9-2.1 SUSE-SU-2018:2962-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_8 +1 7-2.1 SUSE-SU-2018:2962-1
SUSE OpenStack Cloud Crowbar 8 kernel-syms +2 4.4.180-94.138.1 SUSE-SU-2021:0452-1
SUSE OpenStack Cloud Crowbar 8 kgraft-patch-SLE12-SP3_Update_37 1-4.3.1 SUSE-SU-2021:0452-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.138.1 SUSE-SU-2021:0452-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_37 1-4.3.1 SUSE-SU-2021:0452-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.95.1 SUSE-SU-2018:3084-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_25 1-3.4.1 SUSE-SU-2018:3084-1
SUSE OpenStack Cloud 7 lttng-modules 2.7.1-9.6.1 SUSE-SU-2018:3084-1
SUSE Linux Enterprise Point of Sale 11 SP3 kernel-ec2 +6 3.0.101-0.47.106.50.1 SUSE-SU-2018:2907-1
SUSE HPE Helion OpenStack 8 kernel-syms +2 4.4.180-94.138.1 SUSE-SU-2021:0452-1
SUSE HPE Helion OpenStack 8 kgraft-patch-SLE12-SP3_Update_37 1-4.3.1 SUSE-SU-2021:0452-1
SUSE Enterprise Storage 5 kernel-syms +2 4.4.180-94.138.1 SUSE-SU-2021:0452-1
SUSE Enterprise Storage 5 kgraft-patch-SLE12-SP3_Update_37 1-4.3.1 SUSE-SU-2021:0452-1
SUSE Enterprise Storage 4 kernel-syms +2 4.4.121-92.95.1 SUSE-SU-2018:3084-1
SUSE Enterprise Storage 4 kgraft-patch-SLE12-SP2_Update_25 1-3.4.1 SUSE-SU-2018:3084-1
SUSE Enterprise Storage 4 lttng-modules 2.7.1-9.6.1 SUSE-SU-2018:3084-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 dtrace-modules-3.8.13-118.28.1.el6uek +1 0.4.5-3.el6 ELSA-2019-4316, ELSA-2018-4300
Oracle Linux 7 dtrace-modules-3.8.13-118.28.1.el7uek +1 0.4.5-3.el7 ELSA-2019-4316, ELSA-2018-4300
Oracle Linux 7 kernel-uek +5 3.8.13-118.28.1.el7uek ELSA-2019-4316, ELSA-2018-4300, ELSA-2018-4299
Oracle Linux 7 perf +12 3.10.0-957.el7 ELSA-2018-3083

Advisories 43

References