The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | May 9, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | May 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel | Feb 26, 2019 | May 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfo | Sep 27, 2018 | May 9, 2018 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2018 | Apr 18, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Oct 31, 2018 | May 9, 2018 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade cluster-network-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-ec2-develUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-docs-azureUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-docsUpgrade ocfs2-kmp-default | Sep 17, 2018 | May 9, 2018 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1027-kvmUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1023-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-128-powerpc64-smpUpgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-4.4.0-128-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-157-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-azureUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1094-snapdragonUpgrade linux-image-4.15.0-24-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-128-genericUpgrade linux-image-4.4.0-128-generic-lpaeUpgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.4.0-1091-raspi2Upgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-4.4.0-128-powerpc64-embUpgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-4.15.0-1014-azureUpgrade linux-image-4.4.0-128-lowlatencyUpgrade linux-image-4.15.0-1011-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-128-powerpc-smpUpgrade linux-image-3.13.0-157-powerpc-e500 | Jun 13, 2018 | May 9, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub