An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfo | Apr 27, 2020 | Oct 29, 2018 |
| Amazon_linux | — | Upgrade kernel | Dec 21, 2018 | Oct 29, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debug-devel | Dec 4, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-devel | May 30, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headers | Apr 3, 2019 | Oct 29, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 29, 2018 | Oct 29, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 29, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-obs-build | Nov 8, 2018 | Oct 29, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-141-powerpc64-embUpgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-4.4.0-141-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-141-genericUpgrade linux-image-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-141-powerpc-e500mcUpgrade linux-image-4.4.0-141-lowlatencyUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-4.4.0-141-generic-lpaeUpgrade linux-image-4.18.0-1007-azureUpgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-4.18.0-1005-gcpUpgrade linux-image-4.4.0-1102-raspi2Upgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpaeUpgrade linux-image-4.18.0-1006-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1037-awsUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1106-snapdragonUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-4.4.0-1074-awsUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-4.18.0-1007-awsUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-4.18.0-13-genericUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.18.0-13-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.18.0-13-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.18.0-13-snapdragonUpgrade linux-image-4.4.0-141-powerpc64-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1039-kvmUpgrade linux-image-3.13.0-164-genericUpgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-4.18.0-1008-raspi2Upgrade linux-image-oemUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-43-lowlatency | Jan 11, 2019 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub