The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 16, 2018 | Mar 30, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | Mar 30, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-devel | May 29, 2018 | Mar 30, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-develUpgrade perf | Sep 27, 2018 | Mar 30, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 15, 2018 | Feb 14, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 15, 2018 | Mar 30, 2018 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kgraft-patch-4_4_90-92_45-defaultUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kgraft-patch-4_4_103-92_56-defaultUpgrade kgraft-patch-4_4_74-92_29-defaultUpgrade kgraft-patch-4_4_74-92_32-defaultUpgrade kernel-obs-buildUpgrade kgraft-patch-4_4_74-92_38-defaultUpgrade kernel-source-azureUpgrade kgraft-patch-4_4_114-92_64-defaultUpgrade kgraft-patch-4_4_74-92_35-defaultUpgrade kernel-default-manUpgrade kgraft-patch-4_4_59-92_24-defaultUpgrade kgraft-patch-4_4_114-92_67-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade ocfs2-kmp-defaultUpgrade kgraft-patch-4_4_59-92_17-defaultUpgrade kgraft-patch-4_4_90-92_50-defaultUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kgraft-patch-4_4_59-92_20-defaultUpgrade kgraft-patch-4_4_103-92_53-default | Apr 4, 2018 | Mar 28, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-161-powerpc64-smpUpgrade linux-image-4.4.0-121-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-1087-raspi2Upgrade linux-image-3.13.0-161-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-121-powerpc64-smpUpgrade linux-image-4.4.0-121-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-161-genericUpgrade linux-image-highbankUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-161-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-121-powerpc-e500mcUpgrade linux-image-3.13.0-161-powerpc-smpUpgrade linux-image-3.13.0-161-lowlatencyUpgrade linux-image-4.4.0-1021-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1055-awsUpgrade linux-image-3.13.0-161-powerpc-e500Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1017-awsUpgrade linux-image-4.4.0-121-generic-lpaeUpgrade linux-image-4.4.0-121-lowlatencyUpgrade linux-image-3.13.0-161-powerpc-e500mcUpgrade linux-image-4.4.0-1090-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-121-powerpc64-emb | May 1, 2018 | Mar 30, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub