An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade python-perf | Apr 27, 2020 | Oct 3, 2018 |
| Amazon_linux | — | Upgrade kernel | Nov 8, 2018 | Oct 3, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 20, 2019 | Oct 3, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 3, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade perf | Dec 4, 2019 | Oct 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel | May 1, 2019 | Oct 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 15, 2019 | Oct 3, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 7, 2019 | Sep 27, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 14, 2019 | Oct 3, 2018 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2 | May 21, 2019 | Oct 3, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-genericUpgrade linux-image-3.13.0-165-powerpc-smpUpgrade linux-image-3.13.0-165-powerpc-e500Upgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-3.13.0-165-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-4.4.0-1072-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-3.13.0-165-lowlatencyUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-3.13.0-165-powerpc-e500mcUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-165-generic-lpaeUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-3.13.0-165-powerpc64-embUpgrade linux-image-4.4.0-139-genericUpgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1034-awsUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-165-genericUpgrade linux-image-aws-hweUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-4.15.0-45-generic-lpae | Nov 23, 2018 | Oct 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub