An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 6, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-devel | Sep 16, 2021 | Jul 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Sep 25, 2019 | Jul 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel | Sep 12, 2019 | Jul 6, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-devel-azure | Jul 25, 2018 | Jul 6, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-134-powerpc-smpUpgrade linux-image-4.4.0-1032-kvmUpgrade linux-image-4.15.0-1020-kvmUpgrade linux-image-4.15.0-1022-azureUpgrade linux-image-4.15.0-33-generic-lpaeUpgrade linux-image-4.4.0-134-powerpc64-smpUpgrade linux-image-4.15.0-1017-oemUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-4.4.0-1066-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-4.4.0-134-genericUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-134-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-33-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-33-genericUpgrade linux-image-4.15.0-1020-awsUpgrade linux-image-oemUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-4.4.0-1028-awsUpgrade linux-image-4.4.0-1099-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-33-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1021-raspi2Upgrade linux-image-4.15.0-1018-gcpUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-134-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-azure-edgeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-134-powerpc-e500mcUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1095-raspi2Upgrade linux-image-4.4.0-134-lowlatency | Aug 31, 2018 | Jul 6, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub