CVE-2018-12633

An issue was discovered in the Linux kernel through 4.17.2. vbg_misc_device_ioctl() in drivers/virt/vboxguest/vboxguest_linux.c reads the same user data twice with copy_from_user. The header part of the user data is double-fetched, and a malicious user thread can tamper with the critical variables (hdr.size_in and hdr.size_out) in the header between the two fetches because of a race condition, leading to severe kernel errors, such as buffer over-accesses. This bug can cause a local denial of service and information leakage.

• CWE-362

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bd23a7269834dc7c1f93e83535d16ebc44b75ebaPatch, Vendor Advisory
• https://bugzilla.kernel.org/show_bug.cgi?id=200131Issue Tracking, Vendor Advisory
• https://github.com/torvalds/linux/commit/bd23a7269834dc7c1f93e83535d16ebc44b75ebaPatch, Third Party Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bd23a7269834dc7c1f93e83535d16ebc44b75ebaPatch, Vendor Advisory
• https://bugzilla.kernel.org/show_bug.cgi?id=200131Issue Tracking, Vendor Advisory
• https://github.com/torvalds/linux/commit/bd23a7269834dc7c1f93e83535d16ebc44b75ebaPatch, Third Party Advisory

Published

Jun 22, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12627An issue was discovered in Eventum 3.5.0. /htdocs/list.php h…
• CVE-2018-12628An issue was discovered in Eventum 3.5.0. CSRF in htdocs/man…
• CVE-2018-1263Addresses partial fix in CVE-2018-1261. Pivotal spring-integ…4.7
• CVE-2018-12630NEWMARK (aka New Mark) NMCMS 2.1 allows SQL Injection via th…
• CVE-2018-12631Redatam7 (formerly Redatam WebServer) allows remote attacker…
• CVE-2018-12632Redatam7 (formerly Redatam WebServer) allows remote attacker…
• CVE-2018-12634CirCarLife Scada before 4.3 allows remote attackers to obtai…9.8
• CVE-2018-12635CirCarLife Scada v4.2.4 allows unauthorized upgrades via req…
• CVE-2018-12636The iThemes Security (better-wp-security) plugin before 7.0.…
• CVE-2018-12638An issue was discovered in the Bose Soundtouch app 18.1.4 fo…
• CVE-2018-1264Cloud Foundry Log Cache, versions prior to 1.1.1, logs its U…9.1
• CVE-2018-12640The webService binary on Insteon HD IP Camera White 2864-222…9.8