CVE-2018-16597 json
An issue was discovered in the Linux kernel before 4.8.
published 8y ago modified 4mo ago also EUVD-2018-8404
- cvss
- 5.5
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 46%
- public exploits
- 0
- none known
Summary
An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem.
Patch / fix
- linux linux_kernel 4.8
- linux Debian 14, Debian 13, Debian 12 4.8.5-1
debian advisories DEBIAN-CVE-2018-16597
- kernel RHEL 7 3.10.0-514.el7
- perf RHEL 7 3.10.0-514.el7
- python-perf RHEL 7 3.10.0-514.el7
- kernel-kdump RHEL 7 3.10.0-514.el7
- kernel-tools RHEL 7 3.10.0-514.el7
- kernel-tools-libs RHEL 7 3.10.0-514.el7
- kernel-bootwrapper RHEL 7 3.10.0-514.el7
- kernel-abi-whitelists RHEL 7 3.10.0-514.el7
red hat advisories RHSA-2016:2574
- kernel-azure SLES for SAP 12 SP3, SLES 12 SP3 4.4.162-4.19.2
- kernel-syms-azure SLES for SAP 12 SP3, SLES 12 SP3 4.4.162-4.19.1
- kernel-source-azure SLES for SAP 12 SP3, SLES 12 SP3 4.4.162-4.19.1
- kernel-rt SLE Real Time 12 SP3 4.4.162-3.26.1
- kernel-syms-rt SLE Real Time 12 SP3 4.4.162-3.26.1
- kernel-rt_debug SLE Real Time 12 SP3 4.4.162-3.26.1
- kernel-source-rt SLE Real Time 12 SP3 4.4.162-3.26.1
- kernel-syms SLES for SAP 12 SP3, SLES 12 SP3, SLED 12 SP3 4.4.156-94.57.1
suse advisories SUSE-SU-2019:0095-1SUSE-SU-2018:3659-1SUSE-SU-2018:3003-1SUSE-SU-2018:3004-1
Is CVE-2018-16597 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerVendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2018-16597 updated cvss 5.3
kernel: overlayfs file truncation without permissions
-
Red Hat Enterprise Linux Client (v. 7) perf 3.10.0-514.el7, kernel 3.10.0-514.el7, python-perf 3.10.0-514.el7, kernel-tools 3.10.0-514.el7, kernel-tools-libs 3.10.0-514.el7, kernel-abi-whitelists 3.10.0-514.el7, +1 more Red Hat Enterprise Linux Client Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-514.el7 Red Hat Enterprise Linux ComputeNode (v. 7) perf 3.10.0-514.el7, kernel 3.10.0-514.el7, python-perf 3.10.0-514.el7, kernel-tools 3.10.0-514.el7, kernel-tools-libs 3.10.0-514.el7, kernel-abi-whitelists 3.10.0-514.el7, +1 more Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-514.el7 Red Hat Enterprise Linux Server (v. 7) perf 3.10.0-514.el7, kernel 3.10.0-514.el7, python-perf 3.10.0-514.el7, kernel-kdump 3.10.0-514.el7, kernel-tools 3.10.0-514.el7, kernel-tools-libs 3.10.0-514.el7, +6 more Red Hat Enterprise Linux Server Optional (v. 7) kernel-debuginfo-common-ppc64 3.10.0-514.el7, kernel-debuginfo-common-x86_64 3.10.0-514.el7, kernel-debuginfo-common-ppc64le 3.10.0-514.el7fixed: vendor fix RHSA-2016:2574
+2 more productsfewer
Red Hat Enterprise Linux Workstation (v. 7) perf 3.10.0-514.el7, kernel 3.10.0-514.el7, python-perf 3.10.0-514.el7, kernel-tools 3.10.0-514.el7, kernel-tools-libs 3.10.0-514.el7, kernel-abi-whitelists 3.10.0-514.el7, +1 more Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-514.el7 -
Red Hat Enterprise Linux 5 kernel Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, kernel-rt, kernel-alt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more Red Hat Enterprise MRG 2 kernel-rt, mrg-rt-release, kernel-rt-trace, kernel-rt-vanilla, kernel-rt-firmwarenot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.55% chance of exploitation in the next 30 days, higher than 46% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 5.5 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
| NVD | 2.0 | 4.9 | AV:L/AC:L/Au:N/C:N/I:C/A:N |
Classification
- Weakness
-
- CWE-863 Incorrect Authorization
- Technology feeds
References
-
git.kernel.org
/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c0ca3d70e8d3cf81e2255a217f7ca402f5ed0862
patch, third-party-advisory
-
security.netapp.com
/advisory/ntap-20190204-0001/
patch, third-party-advisory
-
bugzilla.suse.com
/show_bug.cgi?id=1106512
issue-tracking, patch, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2018-10/msg00033.html
vendor-advisory, mailing-list, third-party-advisory
-
securityfocus.com
/bid/105394
vdb-entry, third-party-advisory
-
support.f5.com
/csp/article/K22691834
third-party-advisory
-
seclists.org
/bugtraq/2019/Jul/33
mailing-list
- packetstormsecurity.com /files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
Sources
- CVE List CVE-2018-16597
- NVD CVE-2018-16597
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.