An issue was discovered in the Linux kernel before 4.18.11. The ipddp_ioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel address information by leveraging CAP_NET_ADMIN to read the ipddp_route dev and next fields via an SIOCFINDIPDDPRT ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 27, 2019 | Dec 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-tools | Dec 4, 2019 | Dec 27, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf | May 30, 2019 | Dec 27, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Mar 11, 2019 | Dec 27, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-oracleUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-16.04 | Aug 14, 2019 | Dec 27, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub