CVE-2018-7995

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

Race condition in the store_int_with_restart() function in arch/x86/kernel/cpu/mcheck/mce.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (panic) by leveraging root access to write to the check_interval file in a /sys/devices/system/machinecheck/machinecheck<cpu number> directory. NOTE: a third party has indicated that this report is not security relevant

Metrics

CVSS 3.0 4.7/10CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/103356Third Party Advisory, VDB Entry
https://bugzilla.suse.com/show_bug.cgi?id=1084755Issue Tracking, Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=b3b7c4795ccab5be71f080774c45bbbcc75c2aafPatch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlThird Party Advisory
https://lkml.org/lkml/2018/3/2/970Patch, Third Party Advisory
https://usn.ubuntu.com/3654-1/Third Party Advisory
https://usn.ubuntu.com/3654-2/Third Party Advisory
https://usn.ubuntu.com/3656-1/Third Party Advisory
https://www.debian.org/security/2018/dsa-4187Third Party Advisory
https://www.debian.org/security/2018/dsa-4188Third Party Advisory
http://www.securityfocus.com/bid/103356Third Party Advisory, VDB Entry
https://bugzilla.suse.com/show_bug.cgi?id=1084755Issue Tracking, Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=b3b7c4795ccab5be71f080774c45bbbcc75c2aafPatch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlThird Party Advisory
https://lkml.org/lkml/2018/3/2/970Patch, Third Party Advisory
https://usn.ubuntu.com/3654-1/Third Party Advisory
https://usn.ubuntu.com/3654-2/Third Party Advisory
https://usn.ubuntu.com/3656-1/Third Party Advisory
https://www.debian.org/security/2018/dsa-4187Third Party Advisory
https://www.debian.org/security/2018/dsa-4188Third Party Advisory

Timeline

Published: Mar 9, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-79966.1Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter.CVE-2018-79976.1Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted CVE-2018-79987.5In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which CVE-2018-79998.8In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, whi CVE-2018-80008.8In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a rela CVE-2018-80017.8In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp. Remote attackers could leverage CVE-2018-80028.8In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result CVE-2018-80035.3Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated user to craft an HTTP req CVE-2018-80046.5There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apache Traffic Server (ATS CVE-2018-80055.3When there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the entire object from cache. This can cause perfor CVE-2018-80066.1An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp pa CVE-2018-80077.2Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied