CVE-2018-5333

In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.

• CWE-476

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7d11f77f84b27cef452cee332f4e469503084737Issue Tracking, Patch, Vendor Advisory
• http://packetstormsecurity.com/files/156053/Reliable-Datagram-Sockets-RDS-rds_atomic_free_op-Privilege-Escalation.html
• http://www.securityfocus.com/bid/102510Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2018:0470Third Party Advisory
• https://github.com/torvalds/linux/commit/7d11f77f84b27cef452cee332f4e469503084737Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3583-1/Third Party Advisory
• https://usn.ubuntu.com/3583-2/Third Party Advisory
• https://usn.ubuntu.com/3617-1/Third Party Advisory
• https://usn.ubuntu.com/3617-2/Third Party Advisory
• https://usn.ubuntu.com/3617-3/Third Party Advisory
• https://usn.ubuntu.com/3619-1/Third Party Advisory
• https://usn.ubuntu.com/3619-2/Third Party Advisory
• https://usn.ubuntu.com/3632-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4187Third Party Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7d11f77f84b27cef452cee332f4e469503084737Issue Tracking, Patch, Vendor Advisory
• http://packetstormsecurity.com/files/156053/Reliable-Datagram-Sockets-RDS-rds_atomic_free_op-Privilege-Escalation.html
• http://www.securityfocus.com/bid/102510Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2018:0470Third Party Advisory
• https://github.com/torvalds/linux/commit/7d11f77f84b27cef452cee332f4e469503084737Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3583-1/Third Party Advisory
• https://usn.ubuntu.com/3583-2/Third Party Advisory
• https://usn.ubuntu.com/3617-1/Third Party Advisory
• https://usn.ubuntu.com/3617-2/Third Party Advisory
• https://usn.ubuntu.com/3617-3/Third Party Advisory
• https://usn.ubuntu.com/3619-1/Third Party Advisory
• https://usn.ubuntu.com/3619-2/Third Party Advisory
• https://usn.ubuntu.com/3632-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4187Third Party Advisory

Published

Jan 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5327Cheetah Mobile Armorfly Browser & Downloader 1.1.05.0010, wh…
• CVE-2018-5328ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to var…
• CVE-2018-5329ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 is vulnerable to Cro…
• CVE-2018-5330ZyXEL P-660HW v3 devices allow remote attackers to cause a d…
• CVE-2018-5331Discuz! DiscuzX X3.4 has XSS via the view parameter to inclu…
• CVE-2018-5332In the Linux kernel through 3.2, the rds_message_alloc_sgs()…7.8
• CVE-2018-5334In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriW…
• CVE-2018-5335In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dis…
• CVE-2018-5336In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, X…
• CVE-2018-5337An issue was discovered in Zoho ManageEngine Desktop Central…
• CVE-2018-5338An issue was discovered in Zoho ManageEngine Desktop Central…
• CVE-2018-5339An issue was discovered in Zoho ManageEngine Desktop Central…