The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade perf-debuginfo | Apr 27, 2020 | May 24, 2018 |
| Amazon_linux | — | Upgrade kernel | May 31, 2018 | May 1, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 1, 2018 | May 1, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | May 1, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headers | May 29, 2018 | May 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Jul 3, 2018 | May 24, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 10, 2018 | May 1, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 9, 2018 | May 1, 2018 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-default-extra | May 12, 2018 | May 1, 2018 |
| Ubuntu | — | Upgrade linux-image-euclidUpgrade linux-image-3.13.0-147-powerpc64-embUpgrade linux-image-4.4.0-124-powerpc64-embUpgrade linux-image-3.13.0-147-powerpc-smpUpgrade linux-image-3.2.0-134-genericUpgrade linux-image-3.13.0-147-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-124-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.13.0-41-genericUpgrade linux-image-4.4.0-124-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-3.2.0-134-generic-paeUpgrade linux-image-4.13.0-1015-gcpUpgrade linux-image-4.13.0-1019-raspi2Upgrade linux-image-4.4.0-1092-snapdragonUpgrade linux-image-4.4.0-1089-raspi2Upgrade linux-image-highbankUpgrade linux-image-3.13.0-147-powerpc-e500Upgrade linux-image-generic-paeUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-124-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.2.0-134-highbankUpgrade linux-image-4.4.0-124-lowlatencyUpgrade linux-image-4.4.0-124-powerpc-smpUpgrade linux-image-4.13.0-1016-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1057-awsUpgrade linux-image-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-147-powerpc64-smpUpgrade linux-image-4.4.0-9027-euclidUpgrade linux-image-3.13.0-147-lowlatencyUpgrade linux-image-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-147-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-omapUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.13.0-41-generic-lpaeUpgrade linux-image-4.4.0-1023-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.13.0-1026-oemUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.2.0-134-powerpc64-smpUpgrade linux-image-3.13.0-147-generic-lpaeUpgrade linux-image-4.4.0-124-genericUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1019-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-3.2.0-134-omapUpgrade linux-image-3.2.0-134-virtualUpgrade linux-image-powerpcUpgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500Upgrade linux-image-oemUpgrade linux-image-3.2.0-134-powerpc-smpUpgrade linux-image-4.13.0-41-lowlatency | May 17, 2018 | May 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub