An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfo | Apr 27, 2020 | Oct 29, 2018 |
| Amazon_linux | — | Upgrade kernel | Dec 21, 2018 | Oct 29, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade python-perf | Dec 4, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perf | May 30, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Apr 3, 2019 | Oct 29, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 29, 2018 | Oct 29, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 29, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-extra | Nov 8, 2018 | Oct 29, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-4.4.0-1037-awsUpgrade linux-image-4.18.0-1005-gcpUpgrade linux-image-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-4.4.0-141-powerpc64-embUpgrade linux-image-4.4.0-1074-awsUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-1006-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-141-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.4.0-141-genericUpgrade linux-image-4.4.0-141-powerpc-e500mcUpgrade linux-image-4.4.0-141-generic-lpaeUpgrade linux-image-4.4.0-141-lowlatencyUpgrade linux-image-genericUpgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-4.4.0-1102-raspi2Upgrade linux-image-gcpUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-4.18.0-1007-azureUpgrade linux-image-4.4.0-1106-snapdragonUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.18.0-13-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-4.18.0-13-snapdragonUpgrade linux-image-4.18.0-13-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-4.4.0-141-powerpc64-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-43-genericUpgrade linux-image-4.18.0-13-genericUpgrade linux-image-4.18.0-1007-awsUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-4.18.0-1008-raspi2Upgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-3.13.0-164-genericUpgrade linux-image-4.4.0-1039-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-kvm | Jan 11, 2019 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub