An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools | Apr 27, 2020 | Oct 3, 2018 |
| Amazon_linux | — | Upgrade kernel | Nov 8, 2018 | Oct 3, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 20, 2019 | Oct 3, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 3, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade perf | Dec 4, 2019 | Oct 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf | May 1, 2019 | Oct 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Feb 15, 2019 | Oct 3, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 7, 2019 | Sep 27, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 14, 2019 | Oct 3, 2018 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2Upgrade gfs2-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-default | May 21, 2019 | Oct 3, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-165-powerpc-e500Upgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1072-awsUpgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-oemUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-azureUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-3.13.0-165-powerpc64-smpUpgrade linux-image-3.13.0-165-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-139-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1034-awsUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-165-lowlatencyUpgrade linux-image-3.13.0-165-genericUpgrade linux-image-3.13.0-165-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-3.13.0-165-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-3.13.0-165-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenial | Nov 23, 2018 | Oct 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub