An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-devel | Apr 27, 2020 | Sep 7, 2018 |
| Amazon_linux | — | Upgrade kernel | Oct 5, 2018 | Sep 7, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Sep 7, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Sep 7, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 31, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headers | Dec 31, 2018 | Sep 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libs | Feb 15, 2019 | Sep 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Feb 15, 2019 | Sep 7, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 27, 2018 | Apr 26, 2018 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 7, 2019 | Sep 7, 2018 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-docs-azureUpgrade kernel-azure-base | Sep 17, 2018 | Sep 7, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-39-snapdragonUpgrade linux-image-3.13.0-162-powerpc-e500mcUpgrade linux-image-4.4.0-138-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-138-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-3.13.0-162-generic-lpaeUpgrade linux-image-4.4.0-1103-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-138-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.15.0-39-genericUpgrade linux-image-4.4.0-138-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-162-genericUpgrade linux-image-4.4.0-1032-awsUpgrade linux-image-4.15.0-1026-oemUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1024-gcpUpgrade linux-image-3.13.0-162-lowlatencyUpgrade linux-image-4.15.0-39-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1026-kvmUpgrade linux-image-4.4.0-138-genericUpgrade linux-image-4.15.0-1031-azureUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-138-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-3.13.0-162-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1099-raspi2Upgrade linux-image-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-39-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-162-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-162-powerpc-e500Upgrade linux-image-4.15.0-1028-raspi2Upgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-138-lowlatencyUpgrade linux-image-4.4.0-1070-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-162-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-1036-kvmUpgrade linux-image-azureUpgrade linux-image-4.15.0-1027-aws | Oct 31, 2018 | Sep 7, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub