In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 17, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 20, 2019 | Oct 17, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 17, 2018 |
| Oracle_linux | — | Upgrade kernel | Mar 14, 2019 | Oct 5, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 14, 2019 | Oct 17, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-default-man | Nov 8, 2018 | Oct 17, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-oemUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-4.15.0-1036-azureUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-4.18.0-1006-awsUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-aws | Dec 7, 2018 | Oct 17, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub