The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | May 9, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | May 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-debug-devel | Feb 26, 2019 | May 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools | Sep 27, 2018 | May 9, 2018 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2018 | Apr 18, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 31, 2018 | May 9, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-docs-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-ec2Upgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-syms-azureUpgrade kernel-ec2-develUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade cluster-network-kmp-default | Sep 17, 2018 | May 9, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-4.4.0-1091-raspi2Upgrade linux-image-4.15.0-1014-azureUpgrade linux-image-azureUpgrade linux-image-4.15.0-1011-awsUpgrade linux-image-4.15.0-24-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-128-genericUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.4.0-128-generic-lpaeUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1061-awsUpgrade linux-image-4.4.0-128-powerpc-smpUpgrade linux-image-4.4.0-128-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-4.4.0-1094-snapdragonUpgrade linux-image-4.4.0-128-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-4.4.0-128-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-4.4.0-128-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1023-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1027-kvm | Jun 13, 2018 | May 9, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub