The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8 does not validate certain resource availability, which allows local users to cause a denial of service (NULL pointer dereference).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools | Aug 25, 2020 | Mar 10, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 10, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 12, 2018 | Jan 11, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 10, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-source-azure | Apr 19, 2018 | Mar 10, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-4.13.0-1013-gcpUpgrade linux-image-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-4.13.0-1014-azureUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-4.13.0-39-lowlatencyUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.13.0-39-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.13.0-1017-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-4.13.0-1024-oemUpgrade linux-image-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-4.13.0-39-generic-lpaeUpgrade linux-image-oem | Apr 25, 2018 | Mar 10, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 10, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub