An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python-perf-debuginfo | Apr 27, 2020 | Sep 7, 2018 |
| Amazon_linux | — | Upgrade kernel | Oct 5, 2018 | Sep 7, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Sep 7, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Sep 7, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 31, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf | Dec 31, 2018 | Sep 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf | Feb 15, 2019 | Sep 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-devel | Feb 15, 2019 | Sep 7, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 27, 2018 | Apr 26, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 7, 2019 | Sep 7, 2018 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-docs-azureUpgrade kernel-azure-baseUpgrade kernel-default | Sep 17, 2018 | Sep 7, 2018 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-4.4.0-138-powerpc64-embUpgrade linux-image-4.4.0-138-genericUpgrade linux-image-oemUpgrade linux-image-4.15.0-1026-kvmUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1024-gcpUpgrade linux-image-3.13.0-162-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-162-generic-lpaeUpgrade linux-image-4.15.0-39-genericUpgrade linux-image-3.13.0-162-lowlatencyUpgrade linux-image-4.4.0-138-powerpc64-smpUpgrade linux-image-4.4.0-138-powerpc-smpUpgrade linux-image-4.15.0-39-snapdragonUpgrade linux-image-3.13.0-162-powerpc-e500mcUpgrade linux-image-4.4.0-138-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1103-snapdragonUpgrade linux-image-4.15.0-39-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1026-oemUpgrade linux-image-4.4.0-138-powerpc-e500mcUpgrade linux-image-3.13.0-162-genericUpgrade linux-image-4.4.0-1032-awsUpgrade linux-image-4.15.0-1031-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1099-raspi2Upgrade linux-image-4.15.0-1028-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-138-lowlatencyUpgrade linux-image-awsUpgrade linux-image-3.13.0-162-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1070-awsUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-3.13.0-162-powerpc-e500Upgrade linux-image-4.15.0-1027-awsUpgrade linux-image-azureUpgrade linux-image-4.4.0-1036-kvmUpgrade linux-image-4.15.0-39-lowlatencyUpgrade linux-image-3.13.0-162-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenial | Oct 31, 2018 | Sep 7, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub