The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 28, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 28, 2018 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-4.13.0-46-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.13.0-1023-raspi2Upgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.13.0-46-generic-lpaeUpgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-4.15.0-1011-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-genericUpgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-4.15.0-24-genericUpgrade linux-image-4.13.0-46-genericUpgrade linux-image-4.15.0-1014-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-4.13.0-1031-oem | Jul 4, 2018 | May 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub