kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | May 21, 2018 |
| Amazon_linux | — | Upgrade kernel | May 31, 2018 | May 1, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | May 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-devel | Feb 15, 2019 | May 21, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2018 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-default-extra | May 20, 2018 | May 1, 2018 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1020-awsUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-33-lowlatencyUpgrade linux-image-4.15.0-1017-oemUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-33-snapdragonUpgrade linux-image-4.15.0-1021-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-33-genericUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1020-kvmUpgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-genericUpgrade linux-image-4.15.0-33-generic-lpaeUpgrade linux-image-4.15.0-1022-azureUpgrade linux-image-4.15.0-1018-gcp | Jul 27, 2018 | May 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub