An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfo | Apr 27, 2020 | Mar 8, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Mar 8, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Mar 8, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Mar 8, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel | Dec 11, 2019 | Mar 8, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 7, 2018 | Mar 8, 2018 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 7, 2019 | Mar 8, 2018 |
| Suse | — | Upgrade kernel-xenUpgrade kernel-vanilla-livepatch-develUpgrade kernel-vanilla-baseUpgrade kernel-azure-baseUpgrade kernel-debug-baseUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-default-develUpgrade kernel-trace-baseUpgrade kernel-zfcpdump-manUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-traceUpgrade kernel-vanilla-develUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-baseUpgrade kernel-source-azureUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-xen-baseUpgrade kernel-syms-azureUpgrade kernel-vanillaUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-ec2-develUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-trace-develUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-default-kgraftUpgrade kernel-xen-develUpgrade kernel-ec2-base | Aug 9, 2024 | Mar 8, 2018 |
| Ubuntu | — | Upgrade linux-image-4.13.0-1023-raspi2Upgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-3.13.0-153-powerpc64-embUpgrade linux-image-4.4.0-130-powerpc-smpUpgrade linux-image-4.15.0-24-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1011-awsUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.13.0-1031-oemUpgrade linux-image-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-130-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.13.0-46-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-4.4.0-1029-kvmUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-4.13.0-46-lowlatencyUpgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-130-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-130-lowlatencyUpgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-4.4.0-1092-raspi2Upgrade linux-image-4.4.0-130-powerpc-e500mcUpgrade linux-image-4.13.0-46-generic-lpaeUpgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-130-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1095-snapdragonUpgrade linux-image-4.4.0-130-genericUpgrade linux-image-genericUpgrade linux-image-4.4.0-1024-awsUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-1014-azure | Jul 4, 2018 | Mar 8, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub