CVE-2018-10902

Summary

CVE	CVE-2018-10902
State	PUBLISHED
Assigner	redhat
Source Priority	CVE Program / NVD first with legacy fallback
Published	2018-08-21 19:29:00 UTC
Updated	2026-07-07 15:16:40 UTC
Description	It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.

Risk And Classification

Primary CVSS: v3.0 7.8 HIGH from [email protected]

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.005230000 probability, percentile 0.406270000 (date 2026-07-09)

Problem Types: CWE-416 | CWE-415 | CWE-416 CWE-416

Version	Source	Type	Score	Severity	Vector
3.0	[email protected]	Primary	7.8	HIGH	`CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
3.0	[email protected]	Secondary	7.8	HIGH	`CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
3.0	CNA	DECLARED	7.8	HIGH	`CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
2.0	[email protected]	Primary	4.6		`AV:L/AC:L/Au:N/C:P/I:P/A:P`

CVSS v3.0 Breakdown

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 Breakdown

Access Vector

Local

Access Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

AV:L/AC:L/Au:N/C:P/I:P/A:P

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Canonical	Ubuntu Linux	12.04	All	All	All
Operating System	Canonical	Ubuntu Linux	14.04	All	All	All
Operating System	Canonical	Ubuntu Linux	16.04	All	All	All
Operating System	Canonical	Ubuntu Linux	18.04	All	All	All
Operating System	Debian	Debian Linux	8.0	All	All	All
Operating System	Debian	Debian Linux	9.0	All	All	All
Operating System	Linux	Linux Kernel	-	All	All	All
Operating System	Redhat	Enterprise Linux Desktop	6.0	All	All	All
Operating System	Redhat	Enterprise Linux Desktop	7.0	All	All	All
Operating System	Redhat	Enterprise Linux Server	6.0	All	All	All
Operating System	Redhat	Enterprise Linux Server	7.0	All	All	All
Operating System	Redhat	Enterprise Linux Workstation	6.0	All	All	All
Operating System	Redhat	Enterprise Linux Workstation	7.0	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Linux	Linux	unaffected 3.16.58 3.16.* semver	Not specified
CNA	Linux	Linux	unaffected 3.18.117 3.18.* semver	Not specified
CNA	Linux	Linux	unaffected 4.4.144 4.4.* semver	Not specified
CNA	Linux	Linux	unaffected 4.9.115 4.9.* semver	Not specified
CNA	Linux	Linux	unaffected 4.14.100 4.14.* semver	Not specified
CNA	Linux	Linux	unaffected 4.17.10 4.17.* semver	Not specified
CNA	Linux	Linux	unaffected 4.18 * semver	Not specified

References

Reference	Source	Link	Tags
USN-3776-1: Linux kernel vulnerabilities \| Ubuntu security notices	af854a3a-2127-422b-91ae-364da2661108	usn.ubuntu.com	Third Party Advisory
kernel/git/torvalds/linux.git - Linux kernel source tree	af854a3a-2127-422b-91ae-364da2661108	git.kernel.org	Patch, Vendor Advisory
USN-3847-2: Linux kernel (HWE) vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	usn.ubuntu.com	Third Party Advisory
USN-3849-1: Linux kernel vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	usn.ubuntu.com	Third Party Advisory
[SECURITY] [DLA 1531-1] linux-4.9 security update	af854a3a-2127-422b-91ae-364da2661108	lists.debian.org	Mailing List, Third Party Advisory
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	access.redhat.com	Third Party Advisory
Malformed Request	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Third Party Advisory, VDB Entry
USN-3847-3: Linux kernel (Azure) vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	usn.ubuntu.com	Third Party Advisory
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	access.redhat.com
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	access.redhat.com	Third Party Advisory
1590720 – (CVE-2018-10902) CVE-2018-10902 kernel: MIDI driver race condition leads to a double-free	af854a3a-2127-422b-91ae-364da2661108	bugzilla.redhat.com	Issue Tracking, Patch, Third Party Advisory
USN-3776-2: Linux kernel (Xenial HWE) vulnerabilities \| Ubuntu security notices	af854a3a-2127-422b-91ae-364da2661108	usn.ubuntu.com	Third Party Advisory
Debian -- Security Information -- DSA-4308-1 linux	af854a3a-2127-422b-91ae-364da2661108	www.debian.org	Third Party Advisory
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	access.redhat.com	Third Party Advisory
Linux Kernel Double-Free Memory Error in MIDI Driver Lets Local Users Gain Elevated Privileges - SecurityTracker	af854a3a-2127-422b-91ae-364da2661108	www.securitytracker.com	Patch, Third Party Advisory, VDB Entry
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	access.redhat.com
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	access.redhat.com	Third Party Advisory
USN-3847-1: Linux kernel vulnerabilities \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	usn.ubuntu.com	Third Party Advisory
USN-3849-2: Linux kernel (Trusty HWE) vulnerabilities \| Ubuntu security notices	af854a3a-2127-422b-91ae-364da2661108	usn.ubuntu.com	Third Party Advisory
CVE-2018-10902 - Red Hat Customer Portal	MITRE	access.redhat.com
1590720 – (CVE-2018-10902) CVE-2018-10902 kernel: MIDI driver race condition leads to a double-free	MITRE	bugzilla.redhat.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

670269 EulerOS Security Update for kernel (EulerOS-SA-2021-1808)