The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 28, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 28, 2018 |
| Ubuntu | — | Upgrade linux-image-4.13.0-46-genericUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1011-awsUpgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-24-genericUpgrade linux-image-4.15.0-1014-azureUpgrade linux-image-4.13.0-1031-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-4.13.0-46-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-gkeUpgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.13.0-1023-raspi2Upgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-4.13.0-46-generic-lpaeUpgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04 | Jul 4, 2018 | May 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub