An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perf-debuginfo | Apr 27, 2020 | Oct 29, 2018 |
| Amazon_linux | — | Upgrade kernel | Dec 21, 2018 | Oct 29, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debugUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debuginfo | Dec 4, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-tools | May 30, 2019 | Oct 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade perf | Apr 3, 2019 | Oct 29, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 29, 2018 | Oct 29, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 29, 2018 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-default-extra | Nov 8, 2018 | Oct 29, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-4.18.0-13-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.18.0-1007-awsUpgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.18.0-13-snapdragonUpgrade linux-image-4.4.0-141-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.18.0-13-generic-lpaeUpgrade linux-image-4.18.0-1008-raspi2Upgrade linux-image-4.4.0-1039-kvmUpgrade linux-image-awsUpgrade linux-image-4.18.0-13-genericUpgrade linux-image-3.13.0-164-genericUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-generic-lts-trustyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-4.4.0-1106-snapdragonUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-141-genericUpgrade linux-image-4.18.0-1006-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-4.18.0-1005-gcpUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-141-powerpc64-embUpgrade linux-image-4.4.0-141-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-141-lowlatencyUpgrade linux-image-4.4.0-141-generic-lpaeUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-4.18.0-1007-azureUpgrade linux-image-aws-hweUpgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-4.4.0-1037-awsUpgrade linux-image-4.4.0-1102-raspi2Upgrade linux-image-4.4.0-1074-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-141-powerpc-e500mc | Jan 11, 2019 | Oct 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub