The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | May 9, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | May 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-devel | Feb 26, 2019 | May 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfo | Sep 27, 2018 | May 9, 2018 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2018 | Apr 18, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 31, 2018 | May 9, 2018 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade kernel-docs-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade cluster-network-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-ec2-develUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-azure-devel | Sep 17, 2018 | May 9, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-128-powerpc-e500mcUpgrade linux-image-4.4.0-128-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1023-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1027-kvmUpgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-3.13.0-157-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-oemUpgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-4.15.0-1014-azureUpgrade linux-image-4.4.0-128-lowlatencyUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-24-genericUpgrade linux-image-azureUpgrade linux-image-4.4.0-128-powerpc-smpUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-4.4.0-1094-snapdragonUpgrade linux-image-4.4.0-128-generic-lpaeUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-4.4.0-128-powerpc64-embUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-4.4.0-1091-raspi2Upgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-4.4.0-128-genericUpgrade linux-image-4.15.0-1011-aws | Jun 13, 2018 | May 9, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub