An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade python-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64 | Apr 27, 2020 | Oct 3, 2018 |
| Amazon_linux | — | Upgrade kernel | Nov 8, 2018 | Oct 3, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 20, 2019 | Oct 3, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 3, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perf | Dec 4, 2019 | Oct 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libs | May 1, 2019 | Oct 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-tools | Feb 15, 2019 | Oct 3, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 7, 2019 | Sep 27, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 14, 2019 | Oct 3, 2018 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade kernel-defaultUpgrade cluster-md-kmp-default | May 21, 2019 | Oct 3, 2018 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-3.13.0-165-powerpc64-smpUpgrade linux-image-4.4.0-1072-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-165-powerpc-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-genericUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-165-powerpc-e500Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-44-genericUpgrade linux-image-azureUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-3.13.0-165-generic-lpaeUpgrade linux-image-4.4.0-1034-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-3.13.0-165-powerpc64-embUpgrade linux-image-3.13.0-165-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-aws-hweUpgrade linux-image-3.13.0-165-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-139-genericUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-3.13.0-165-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1033-oemUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-139-generic-lpae | Nov 23, 2018 | Oct 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub