kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-devel | Apr 27, 2020 | May 21, 2018 |
| Amazon_linux | — | Upgrade kernel | May 31, 2018 | May 1, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | May 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-debuginfo | Feb 15, 2019 | May 21, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-base | May 20, 2018 | May 1, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1017-oemUpgrade linux-image-4.15.0-33-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.15.0-33-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1020-awsUpgrade linux-image-4.15.0-1021-raspi2Upgrade linux-image-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1020-kvmUpgrade linux-image-4.15.0-1018-gcpUpgrade linux-image-4.15.0-33-generic-lpaeUpgrade linux-image-4.15.0-1022-azureUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-4.15.0-33-genericUpgrade linux-image-generic-lpae | Jul 27, 2018 | May 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub