CVE-2018-16885

A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length. This can cause a read beyond the buffer boundaries flaw and, in certain cases, cause a memory access fault and a system halt by accessing invalid memory address.

This is an Important flaw in the Linux kernel that allows a local unprivileged user to trigger an out-of-bounds read. Successful exploitation could lead to a system halt, or potentially disclose kernel memory to userspace, but the high attack complexity makes it difficult to reliably achieve. Exploit code for this vulnerability is available.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.