In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 17, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 20, 2019 | Oct 17, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 17, 2018 |
| Oracle_linux | — | Upgrade kernel | Mar 14, 2019 | Oct 5, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 14, 2019 | Oct 17, 2018 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-default | Nov 8, 2018 | Oct 17, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-gcpUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1031-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-genericUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-lowlatency | Dec 7, 2018 | Oct 17, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub