An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Apr 27, 2020 | Oct 29, 2018 |
| Amazon_linux | — | Upgrade kernel | Dec 21, 2018 | Oct 29, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libs | May 30, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-tools-libs | Apr 3, 2019 | Oct 29, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 29, 2018 | Oct 29, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 29, 2018 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-default-extra | Nov 8, 2018 | Oct 29, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-4.15.0-1036-azureUpgrade linux-image-4.18.0-13-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-4.18.0-13-genericUpgrade linux-image-4.4.0-1039-kvmUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.18.0-1008-raspi2Upgrade linux-image-3.13.0-164-genericUpgrade linux-image-4.18.0-13-snapdragonUpgrade linux-image-4.18.0-1007-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-4.18.0-13-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-141-powerpc64-smpUpgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-141-powerpc-e500mcUpgrade linux-image-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-4.4.0-1037-awsUpgrade linux-image-4.4.0-141-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-4.18.0-1007-azureUpgrade linux-image-4.18.0-1005-gcpUpgrade linux-image-4.4.0-141-generic-lpaeUpgrade linux-image-4.4.0-141-powerpc64-embUpgrade linux-image-4.4.0-141-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-4.18.0-1006-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-4.4.0-141-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1074-awsUpgrade linux-image-4.4.0-1106-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1102-raspi2Upgrade linux-image-generic | Jan 11, 2019 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub