An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade python-perfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools | Apr 27, 2020 | Oct 3, 2018 |
| Amazon_linux | — | Upgrade kernel | Nov 8, 2018 | Oct 3, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 20, 2019 | Oct 3, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 3, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Dec 4, 2019 | Oct 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel | May 1, 2019 | Oct 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo | Feb 15, 2019 | Oct 3, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 7, 2019 | Sep 27, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 14, 2019 | Oct 3, 2018 |
| Suse | — | suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-cluster-network-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-defaultsuse-upgrade-kernel-docssuse-upgrade-kernel-ec2suse-upgrade-kernel-ec2-develsuse-upgrade-kernel-ec2-extrasuse-upgrade-kernel-obs-buildsuse-upgrade-ocfs2-kmp-default | May 21, 2019 | Oct 3, 2018 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-165-genericubuntu-upgrade-linux-image-3-13-0-165-generic-lpaeubuntu-upgrade-linux-image-3-13-0-165-lowlatencyubuntu-upgrade-linux-image-3-13-0-165-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-165-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-165-powerpc-smpubuntu-upgrade-linux-image-3-13-0-165-powerpc64-embubuntu-upgrade-linux-image-3-13-0-165-powerpc64-smpubuntu-upgrade-linux-image-4-15-0-1027-gcpubuntu-upgrade-linux-image-4-15-0-1029-kvmubuntu-upgrade-linux-image-4-15-0-1031-raspi2ubuntu-upgrade-linux-image-4-15-0-1032-awsubuntu-upgrade-linux-image-4-15-0-1033-oemubuntu-upgrade-linux-image-4-15-0-1037-azureubuntu-upgrade-linux-image-4-15-0-44-genericubuntu-upgrade-linux-image-4-15-0-44-generic-lpaeubuntu-upgrade-linux-image-4-15-0-44-lowlatencyubuntu-upgrade-linux-image-4-15-0-44-snapdragonubuntu-upgrade-linux-image-4-15-0-45-genericubuntu-upgrade-linux-image-4-15-0-45-generic-lpaeubuntu-upgrade-linux-image-4-15-0-45-lowlatencyubuntu-upgrade-linux-image-4-18-0-1004-gcpubuntu-upgrade-linux-image-4-18-0-1005-kvmubuntu-upgrade-linux-image-4-18-0-1006-awsubuntu-upgrade-linux-image-4-18-0-1007-raspi2ubuntu-upgrade-linux-image-4-18-0-12-genericubuntu-upgrade-linux-image-4-18-0-12-generic-lpaeubuntu-upgrade-linux-image-4-18-0-12-lowlatencyubuntu-upgrade-linux-image-4-18-0-12-snapdragonubuntu-upgrade-linux-image-4-4-0-1034-awsubuntu-upgrade-linux-image-4-4-0-1037-kvmubuntu-upgrade-linux-image-4-4-0-1072-awsubuntu-upgrade-linux-image-4-4-0-1100-raspi2ubuntu-upgrade-linux-image-4-4-0-1104-snapdragonubuntu-upgrade-linux-image-4-4-0-139-genericubuntu-upgrade-linux-image-4-4-0-139-generic-lpaeubuntu-upgrade-linux-image-4-4-0-139-lowlatencyubuntu-upgrade-linux-image-4-4-0-139-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-139-powerpc-smpubuntu-upgrade-linux-image-4-4-0-139-powerpc64-embubuntu-upgrade-linux-image-4-4-0-139-powerpc64-smpubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-virtual-hwe-16-04 | Nov 23, 2018 | Oct 3, 2018 | |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub