The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 16, 2018 | Mar 30, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | Mar 30, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo | May 29, 2018 | Mar 30, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64 | Sep 27, 2018 | Mar 30, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2018 | Feb 14, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 15, 2018 | Mar 30, 2018 |
| Suse | — | Upgrade kgraft-patch-4_4_59-92_17-defaultUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade gfs2-kmp-defaultUpgrade kgraft-patch-4_4_59-92_24-defaultUpgrade kernel-ec2Upgrade kgraft-patch-4_4_114-92_67-defaultUpgrade kgraft-patch-4_4_103-92_53-defaultUpgrade ocfs2-kmp-defaultUpgrade kgraft-patch-4_4_59-92_20-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kgraft-patch-4_4_90-92_50-defaultUpgrade kgraft-patch-4_4_114-92_64-defaultUpgrade kgraft-patch-4_4_74-92_38-defaultUpgrade kgraft-patch-4_4_74-92_32-defaultUpgrade kgraft-patch-4_4_74-92_29-defaultUpgrade kgraft-patch-4_4_103-92_56-defaultUpgrade kgraft-patch-4_4_74-92_35-defaultUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kgraft-patch-4_4_90-92_45-defaultUpgrade kernel-default-manUpgrade kernel-devel-azure | Apr 4, 2018 | Mar 28, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-161-lowlatencyUpgrade linux-image-4.4.0-121-generic-lpaeUpgrade linux-image-4.4.0-1017-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-121-powerpc64-embUpgrade linux-image-3.13.0-161-powerpc-e500mcUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-121-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1055-awsUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-1021-kvmUpgrade linux-image-3.13.0-161-powerpc-e500Upgrade linux-image-4.4.0-1090-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-161-powerpc64-smpUpgrade linux-image-4.4.0-121-powerpc-e500mcUpgrade linux-image-3.13.0-161-powerpc64-embUpgrade linux-image-4.4.0-121-genericUpgrade linux-image-3.13.0-161-powerpc-smpUpgrade linux-image-4.4.0-1087-raspi2Upgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-121-powerpc64-smpUpgrade linux-image-3.13.0-161-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-highbankUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-121-powerpc-smpUpgrade linux-image-3.13.0-161-generic | May 1, 2018 | Mar 30, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub