The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | May 9, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | May 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel | Feb 26, 2019 | May 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-headers | Sep 27, 2018 | May 9, 2018 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2018 | Apr 18, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 31, 2018 | May 9, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docs-azureUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade cluster-network-kmp-defaultUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-ec2-develUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-devel-azure | Sep 17, 2018 | May 9, 2018 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-128-powerpc-e500mcUpgrade linux-image-4.4.0-1023-awsUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-3.13.0-157-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-128-powerpc64-smpUpgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-4.4.0-1027-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-4.4.0-1091-raspi2Upgrade linux-image-genericUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-4.15.0-1014-azureUpgrade linux-image-4.15.0-1011-awsUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-4.4.0-128-generic-lpaeUpgrade linux-image-4.4.0-128-genericUpgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-oemUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-128-lowlatencyUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-4.15.0-24-genericUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-128-powerpc-smpUpgrade linux-image-4.4.0-128-powerpc64-embUpgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-4.4.0-1094-snapdragonUpgrade linux-image-powerpc64-smp | Jun 13, 2018 | May 9, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub