CWE Code: 416
Vulnerability Type: privilege_escalation
CVSS Score: 6.7
CWE Name:  Use After Free
Summary: a flaw was found in the linux kernel's nfs41+ subsystem. nfs41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel ids and cause a use-after-free vulnerability. thus a malicious container user can cause a host kernel memory corruption and a system panic. due to the nature of the flaw, privilege escalation cannot be fully ruled out.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/COMPLETE
Published Date: 2018-12-18
Last Modified Date: 2019-05-29