An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools | Apr 27, 2020 | Oct 29, 2018 |
| Amazon_linux | — | Upgrade kernel | Dec 21, 2018 | Oct 29, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debugUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debuginfo | Dec 4, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade python-perf | May 30, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Apr 3, 2019 | Oct 29, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 29, 2018 | Oct 29, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 29, 2018 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-extra | Nov 8, 2018 | Oct 29, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-141-powerpc-smpUpgrade linux-image-4.4.0-141-lowlatencyUpgrade linux-image-4.4.0-1102-raspi2Upgrade linux-image-4.4.0-141-genericUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-4.18.0-1006-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-141-powerpc-e500mcUpgrade linux-image-4.4.0-141-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-141-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-4.4.0-1106-snapdragonUpgrade linux-image-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-4.18.0-1007-azureUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-1005-gcpUpgrade linux-image-4.4.0-1037-awsUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-4.4.0-1074-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1039-kvmUpgrade linux-image-4.18.0-13-lowlatencyUpgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-164-genericUpgrade linux-image-4.18.0-1008-raspi2Upgrade linux-image-4.4.0-141-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.18.0-13-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-gkeUpgrade linux-image-4.18.0-13-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.18.0-1007-awsUpgrade linux-image-4.18.0-13-generic | Jan 11, 2019 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub