kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-devel | Apr 27, 2020 | May 21, 2018 |
| Amazon_linux | — | Upgrade kernel | May 31, 2018 | May 1, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | May 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-devel | Feb 15, 2019 | May 21, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2018 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-man | May 20, 2018 | May 1, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1020-awsUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1017-oemUpgrade linux-image-kvmUpgrade linux-image-4.15.0-33-snapdragonUpgrade linux-image-awsUpgrade linux-image-4.15.0-1021-raspi2Upgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-33-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-33-genericUpgrade linux-image-4.15.0-33-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1020-kvmUpgrade linux-image-oemUpgrade linux-image-4.15.0-1022-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1018-gcpUpgrade linux-image-lowlatency | Jul 27, 2018 | May 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub