The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Jul 2, 2018 |
| Debian | — | Upgrade linux | Mar 18, 2019 | Jul 2, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libs | Feb 26, 2019 | Jul 2, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Dec 31, 2018 | Jul 2, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 12, 2019 | Jun 27, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 24, 2019 | Jul 2, 2018 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-extra | Jul 25, 2018 | Jul 2, 2018 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.4.0-139-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-snapdragonUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1034-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1072-aws | Nov 23, 2018 | Jul 2, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub