The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 16, 2018 | Mar 30, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | Mar 30, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | May 29, 2018 | Mar 30, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-develUpgrade perf | Sep 27, 2018 | Mar 30, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 15, 2018 | Feb 14, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 15, 2018 | Mar 30, 2018 |
| Suse | — | Upgrade kgraft-patch-4_4_74-92_38-defaultUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kgraft-patch-4_4_90-92_45-defaultUpgrade kgraft-patch-4_4_74-92_35-defaultUpgrade kgraft-patch-4_4_103-92_56-defaultUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kgraft-patch-4_4_74-92_29-defaultUpgrade kgraft-patch-4_4_74-92_32-defaultUpgrade kgraft-patch-4_4_114-92_64-defaultUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kgraft-patch-4_4_90-92_50-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2Upgrade kgraft-patch-4_4_114-92_67-defaultUpgrade kgraft-patch-4_4_59-92_24-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kgraft-patch-4_4_103-92_53-defaultUpgrade kgraft-patch-4_4_59-92_17-defaultUpgrade kgraft-patch-4_4_59-92_20-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-base | Apr 4, 2018 | Mar 28, 2018 |
| Ubuntu | — | Upgrade linux-image-highbankUpgrade linux-image-3.13.0-161-powerpc-smpUpgrade linux-image-4.4.0-121-powerpc-smpUpgrade linux-image-3.13.0-161-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-121-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-161-powerpc64-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-121-genericUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-161-genericUpgrade linux-image-3.13.0-161-powerpc64-embUpgrade linux-image-4.4.0-121-powerpc64-smpUpgrade linux-image-4.4.0-1087-raspi2Upgrade linux-image-3.13.0-161-lowlatencyUpgrade linux-image-4.4.0-1021-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-121-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-161-powerpc-e500Upgrade linux-image-4.4.0-1090-snapdragonUpgrade linux-image-4.4.0-1055-awsUpgrade linux-image-4.4.0-121-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-121-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-161-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1017-aws | May 1, 2018 | Mar 30, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub