The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | May 9, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | May 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel | Feb 26, 2019 | May 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perf | Sep 27, 2018 | May 9, 2018 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2018 | Apr 18, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Oct 31, 2018 | May 9, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-ec2-develUpgrade kernel-default-manUpgrade cluster-network-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docs-azureUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade gfs2-kmp-default | Sep 17, 2018 | May 9, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1027-kvmUpgrade linux-image-4.4.0-128-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-1023-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-4.4.0-128-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-3.13.0-157-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-azureUpgrade linux-image-4.4.0-1094-snapdragonUpgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-4.4.0-1091-raspi2Upgrade linux-image-4.15.0-1011-awsUpgrade linux-image-4.15.0-1014-azureUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-128-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-128-genericUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-oemUpgrade linux-image-4.15.0-24-genericUpgrade linux-image-4.4.0-128-powerpc64-embUpgrade linux-image-4.4.0-128-lowlatencyUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-128-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-powerpc64-smp-lts-xenial | Jun 13, 2018 | May 9, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub