An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel | Apr 27, 2020 | Sep 7, 2018 |
| Amazon_linux | — | Upgrade kernel | Oct 5, 2018 | Sep 7, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Sep 7, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Sep 7, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 31, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debugUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-devel | Dec 31, 2018 | Sep 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headers | Feb 15, 2019 | Sep 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Feb 15, 2019 | Sep 7, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 27, 2018 | Apr 26, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 7, 2019 | Sep 7, 2018 |
| Suse | — | Upgrade kernel-docs-azureUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-source-azure | Sep 17, 2018 | Sep 7, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1070-awsUpgrade linux-image-4.15.0-39-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-azureUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-162-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-162-powerpc-smpUpgrade linux-image-4.4.0-1099-raspi2Upgrade linux-image-4.15.0-1028-raspi2Upgrade linux-image-4.4.0-1036-kvmUpgrade linux-image-4.15.0-1027-awsUpgrade linux-image-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-162-powerpc-e500Upgrade linux-image-4.4.0-138-lowlatencyUpgrade linux-image-4.15.0-39-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-138-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-4.4.0-138-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1031-azureUpgrade linux-image-3.13.0-162-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-39-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-3.13.0-162-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1026-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-138-powerpc-smpUpgrade linux-image-3.13.0-162-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1032-awsUpgrade linux-image-4.15.0-39-snapdragonUpgrade linux-image-4.4.0-138-genericUpgrade linux-image-4.4.0-138-generic-lpaeUpgrade linux-image-4.15.0-1026-kvmUpgrade linux-image-3.13.0-162-lowlatencyUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-1024-gcpUpgrade linux-image-4.4.0-138-powerpc-e500mcUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1103-snapdragonUpgrade linux-image-3.13.0-162-genericUpgrade linux-image-generic | Oct 31, 2018 | Sep 7, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub