CVE-2018-10124

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The kill_something_info function in kernel/signal.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service via an INT_MIN argument.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4ea77014af0d6205b05503d1c7aac6eace11d473Patch, Vendor Advisory
http://www.securitytracker.com/id/1040684Third Party Advisory, VDB Entry
https://github.com/torvalds/linux/commit/4ea77014af0d6205b05503d1c7aac6eace11d473Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/07/msg00020.htmlMailing List, Third Party Advisory
https://news.ycombinator.com/item?id=2972021Exploit, Third Party Advisory
https://usn.ubuntu.com/3696-1/Third Party Advisory
https://usn.ubuntu.com/3696-2/Third Party Advisory
https://usn.ubuntu.com/3754-1/Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4ea77014af0d6205b05503d1c7aac6eace11d473Patch, Vendor Advisory
http://www.securitytracker.com/id/1040684Third Party Advisory, VDB Entry
https://github.com/torvalds/linux/commit/4ea77014af0d6205b05503d1c7aac6eace11d473Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/07/msg00020.htmlMailing List, Third Party Advisory
https://news.ycombinator.com/item?id=2972021Exploit, Third Party Advisory
https://usn.ubuntu.com/3696-1/Third Party Advisory
https://usn.ubuntu.com/3696-2/Third Party Advisory
https://usn.ubuntu.com/3754-1/Third Party Advisory

Timeline

Published: Apr 16, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-101256.1Contao before 4.5.7 has XSS in the system log.CVE-2018-101266.5ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_f CVE-2018-101278.8An issue was discovered in XYHCMS 3.5. It has CSRF via an index.php?g=Manage&m=Rbac&a=addUser request, resulting in addition of an account w CVE-2018-101286.1An issue was discovered in XYHCMS 3.5. It has XSS via the test parameter to index.php.CVE-2018-10138.8A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso CVE-2018-101328.8PbootCMS v0.9.8 has CSRF via an admin.php/Message/mod/id/19.html?backurl=/index.php request, resulting in PHP code injection in the reconten CVE-2018-101339.8PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLab CVE-2018-101356.1iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel.CVE-2018-101366.1iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settin CVE-2018-101378.8iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI.CVE-2018-101386.1The CATALooK.netStore module through 7.2.8 for DNN (formerly DotNetNuke) allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin par CVE-2018-101396.1The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and