The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Apr 27, 2020 | May 24, 2018 |
| Amazon_linux | — | Upgrade kernel | May 31, 2018 | May 1, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2018 | May 1, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | May 1, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headers | May 29, 2018 | May 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Jul 3, 2018 | May 24, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 10, 2018 | May 1, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 9, 2018 | May 1, 2018 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | May 12, 2018 | May 1, 2018 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-147-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-omapUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.2.0-134-virtualUpgrade linux-image-4.4.0-1019-awsUpgrade linux-image-3.2.0-134-powerpc64-smpUpgrade linux-image-4.4.0-124-genericUpgrade linux-image-3.13.0-147-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.2.0-134-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-9027-euclidUpgrade linux-image-powerpcUpgrade linux-image-3.2.0-134-omapUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-4.13.0-1026-oemUpgrade linux-image-4.13.0-41-lowlatencyUpgrade linux-image-4.4.0-1023-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-147-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.13.0-41-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.13.0-1019-raspi2Upgrade linux-image-4.4.0-124-powerpc-smpUpgrade linux-image-3.2.0-134-genericUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-paeUpgrade linux-image-4.4.0-1089-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.13.0-1015-gcpUpgrade linux-image-4.4.0-124-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-4.13.0-1016-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-124-powerpc64-smpUpgrade linux-image-3.13.0-147-powerpc64-embUpgrade linux-image-euclidUpgrade linux-image-kvmUpgrade linux-image-3.13.0-147-powerpc-smpUpgrade linux-image-3.13.0-147-genericUpgrade linux-image-3.2.0-134-highbankUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1092-snapdragonUpgrade linux-image-3.2.0-134-generic-paeUpgrade linux-image-3.13.0-147-powerpc64-smpUpgrade linux-image-4.4.0-124-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1057-awsUpgrade linux-image-4.13.0-41-genericUpgrade linux-image-highbankUpgrade linux-image-4.4.0-124-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-147-powerpc-e500Upgrade linux-image-4.4.0-124-powerpc-e500mc | May 17, 2018 | May 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub