An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-devel | Apr 27, 2020 | Oct 29, 2018 |
| Amazon_linux | — | Upgrade kernel | Dec 21, 2018 | Oct 29, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debugUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debuginfo | Dec 4, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade perf | May 30, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel | Apr 3, 2019 | Oct 29, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 29, 2018 | Oct 29, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 29, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-default | Nov 8, 2018 | Oct 29, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.18.0-1006-kvmUpgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-141-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-4.4.0-141-genericUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-aws-hweUpgrade linux-image-4.18.0-1007-azureUpgrade linux-image-4.4.0-141-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-4.4.0-141-lowlatencyUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-4.4.0-141-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1037-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1102-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-141-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1074-awsUpgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-4.4.0-1106-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.18.0-1005-gcpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.18.0-13-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-4.4.0-141-powerpc64-smpUpgrade linux-image-4.18.0-13-snapdragonUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-oemUpgrade linux-image-4.4.0-1039-kvmUpgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-3.13.0-164-genericUpgrade linux-image-4.18.0-1008-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.18.0-13-genericUpgrade linux-image-4.18.0-1007-awsUpgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-4.15.0-1036-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.18.0-13-generic-lpae | Jan 11, 2019 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub