In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 17, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 20, 2019 | Oct 17, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 17, 2018 |
| Oracle_linux | — | Upgrade kernel | Mar 14, 2019 | Oct 5, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 14, 2019 | Oct 17, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-default-extra | Nov 8, 2018 | Oct 17, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1031-awsUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-azureUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-awsUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-kvmUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-43-lowlatency | Dec 7, 2018 | Oct 17, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub