CVE-2018-8781

HIGH

The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the u...

Affects 6 products across 4 vendors.

CVSS 3.17.8
EPSS0.5%
Percentile41th
PatchPatched
CVSS Vector — Plain English Requires local access, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-190: Integer Overflow or Wraparound

Arithmetic operation exceeds the maximum integer value, wrapping around and often leading to undersized allocations.

Related Attack Patterns (CAPEC)
CAPEC-92 Forced Integer Overflow
via CWE-190

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2018. A high severity vulnerability affects Canonical systems (CVE-2018-8781). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2018-GLOBAL-226413-H • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2018-8781?
This vulnerability was disclosed in 2018. A high severity vulnerability affects Canonical systems (CVE-2018-8781). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2018-8781?
CVE-2018-8781 has CVSS 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.5%.
Is CVE-2018-8781 actively exploited?
No confirmed active exploitation of CVE-2018-8781 as of 2026-05-30.
How do I remediate CVE-2018-8781?
Priority: MEDIUM.
What systems are affected by CVE-2018-8781?
CVE-2018-8781 affects Canonical Ubuntu Linux; Debian Debian Linux; Linux Linux Kernel; Redhat Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation.
Vulnerability Details
CVE IDCVE-2018-8781
BSIDBS-2018-GLOBAL-226413-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published2018-04-23
Last Modified2024-11-21
ICS Relevance0%
Weakness (CWE)
Integer Overflow or Wraparound
SourceNVD
Official Description

The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space. CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Canonical Ubuntu Linux 12.04 14.04 16.04 17.10
Debian Debian Linux 7.0 8.0 9.0
Linux Linux Kernel ≥ 3.4, < 3.16.57 ≥ 3.17, < 3.18.103 ≥ 3.19, < 4.1.52 ≥ 4.2, < 4.4.125 ≥ 4.5, < 4.9.91 ≥ 4.10, < 4.14.31
+1 more≥ 4.15, < 4.15.14
Redhat Enterprise Linux Desktop 7.0
Redhat Enterprise Linux Server 7.0
Redhat Enterprise Linux Workstation 7.0
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 3097 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash2525275773ae2303a329d368ae0444cebe5962cd54f77ba6f1d87c0eac9a4bb19bcd0c6a31b776d991e847ffd97f1f7fff29b1a8485c4624fa4b648e8304c0ca
Related CVEs affecting Canonical
CVE-2012-0444 10.0 Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 ... CVE-2012-3963 10.0 Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in M... CVE-2012-3961 10.0 Use-after-free vulnerability in the RangeData implementation in Mozilla Firef... CVE-2015-2724 10.0 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox... CVE-2017-16845 10.0 hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during gue...
View all Canonical CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →