An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-aarch64amazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo | Apr 27, 2020 | Oct 29, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade-kernel | Dec 21, 2018 | Oct 29, 2018 |
| Debian | debian-upgrade-linux | Mar 15, 2019 | Oct 29, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-kernelhuawei-euleros-2_0_sp2-upgrade-kernel-debughuawei-euleros-2_0_sp2-upgrade-kernel-debug-develhuawei-euleros-2_0_sp2-upgrade-kernel-debuginfohuawei-euleros-2_0_sp2-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp2-upgrade-kernel-develhuawei-euleros-2_0_sp2-upgrade-kernel-headershuawei-euleros-2_0_sp2-upgrade-kernel-toolshuawei-euleros-2_0_sp2-upgrade-kernel-tools-libshuawei-euleros-2_0_sp2-upgrade-perfhuawei-euleros-2_0_sp2-upgrade-python-perf | Dec 4, 2019 | Oct 29, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-kernelhuawei-euleros-2_0_sp3-upgrade-kernel-debuginfohuawei-euleros-2_0_sp3-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp3-upgrade-kernel-develhuawei-euleros-2_0_sp3-upgrade-kernel-headershuawei-euleros-2_0_sp3-upgrade-kernel-toolshuawei-euleros-2_0_sp3-upgrade-kernel-tools-libshuawei-euleros-2_0_sp3-upgrade-perfhuawei-euleros-2_0_sp3-upgrade-python-perf | May 30, 2019 | Oct 29, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-kernelhuawei-euleros-2_0_sp5-upgrade-kernel-debuginfohuawei-euleros-2_0_sp5-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp5-upgrade-kernel-develhuawei-euleros-2_0_sp5-upgrade-kernel-headershuawei-euleros-2_0_sp5-upgrade-kernel-toolshuawei-euleros-2_0_sp5-upgrade-kernel-tools-libshuawei-euleros-2_0_sp5-upgrade-perfhuawei-euleros-2_0_sp5-upgrade-python-perf | Apr 3, 2019 | Oct 29, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-kernel-uek | Nov 29, 2018 | Oct 29, 2018 |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Oct 29, 2018 | |
| Suse | — | suse-upgrade-kernel-azure-basesuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-default-mansuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-docssuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-source-azure | Nov 8, 2018 | Oct 29, 2018 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-164-genericubuntu-upgrade-linux-image-3-13-0-164-generic-lpaeubuntu-upgrade-linux-image-3-13-0-164-lowlatencyubuntu-upgrade-linux-image-3-13-0-164-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-164-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-164-powerpc-smpubuntu-upgrade-linux-image-3-13-0-164-powerpc64-embubuntu-upgrade-linux-image-3-13-0-164-powerpc64-smpubuntu-upgrade-linux-image-4-15-0-1026-gcpubuntu-upgrade-linux-image-4-15-0-1028-kvmubuntu-upgrade-linux-image-4-15-0-1030-oemubuntu-upgrade-linux-image-4-15-0-1030-raspi2ubuntu-upgrade-linux-image-4-15-0-1031-awsubuntu-upgrade-linux-image-4-15-0-1036-azureubuntu-upgrade-linux-image-4-15-0-43-genericubuntu-upgrade-linux-image-4-15-0-43-generic-lpaeubuntu-upgrade-linux-image-4-15-0-43-lowlatencyubuntu-upgrade-linux-image-4-15-0-43-snapdragonubuntu-upgrade-linux-image-4-18-0-1005-gcpubuntu-upgrade-linux-image-4-18-0-1006-kvmubuntu-upgrade-linux-image-4-18-0-1007-awsubuntu-upgrade-linux-image-4-18-0-1007-azureubuntu-upgrade-linux-image-4-18-0-1008-raspi2ubuntu-upgrade-linux-image-4-18-0-13-genericubuntu-upgrade-linux-image-4-18-0-13-generic-lpaeubuntu-upgrade-linux-image-4-18-0-13-lowlatencyubuntu-upgrade-linux-image-4-18-0-13-snapdragonubuntu-upgrade-linux-image-4-4-0-1037-awsubuntu-upgrade-linux-image-4-4-0-1039-kvmubuntu-upgrade-linux-image-4-4-0-1074-awsubuntu-upgrade-linux-image-4-4-0-1102-raspi2ubuntu-upgrade-linux-image-4-4-0-1106-snapdragonubuntu-upgrade-linux-image-4-4-0-141-genericubuntu-upgrade-linux-image-4-4-0-141-generic-lpaeubuntu-upgrade-linux-image-4-4-0-141-lowlatencyubuntu-upgrade-linux-image-4-4-0-141-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-141-powerpc-smpubuntu-upgrade-linux-image-4-4-0-141-powerpc64-embubuntu-upgrade-linux-image-4-4-0-141-powerpc64-smpubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon | Jan 11, 2019 | Oct 29, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub