An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perf-debuginfo | Apr 27, 2020 | Oct 3, 2018 |
| Amazon_linux | — | Upgrade kernel | Nov 8, 2018 | Oct 3, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 20, 2019 | Oct 3, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 3, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-headers | Dec 4, 2019 | Oct 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-tools | May 1, 2019 | Oct 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perf | Feb 15, 2019 | Oct 3, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 7, 2019 | Sep 27, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 14, 2019 | Oct 3, 2018 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade cluster-md-kmp-default | May 21, 2019 | Oct 3, 2018 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-165-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-3.13.0-165-powerpc-e500Upgrade linux-image-4.4.0-1072-awsUpgrade linux-image-genericUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-3.13.0-165-powerpc-smpUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-3.13.0-165-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-4.4.0-1034-awsUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-3.13.0-165-powerpc64-embUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-3.13.0-165-powerpc-e500mcUpgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-139-genericUpgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-3.13.0-165-genericUpgrade linux-image-3.13.0-165-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1104-snapdragon | Nov 23, 2018 | Oct 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub