In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 17, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 20, 2019 | Oct 17, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 17, 2018 |
| Oracle_linux | — | Upgrade kernel | Mar 14, 2019 | Oct 5, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 14, 2019 | Oct 17, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-default-extra | Nov 8, 2018 | Oct 17, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1031-awsUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-gcpUpgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-awsUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-gkeUpgrade linux-image-4.18.0-12-lowlatency | Dec 7, 2018 | Oct 17, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub