An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfo | Apr 27, 2020 | Mar 8, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Mar 8, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Mar 8, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Mar 8, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-develUpgrade kernel | Dec 11, 2019 | Mar 8, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 7, 2018 | Mar 8, 2018 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 7, 2019 | Mar 8, 2018 |
| Suse | — | Upgrade kernel-ec2-baseUpgrade kernel-syms-azureUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-trace-develUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-vanillaUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-default-extraUpgrade kernel-default-kgraftUpgrade kernel-zfcpdump-manUpgrade kernel-trace-baseUpgrade kernel-azure-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-kvmsmall-baseUpgrade kernel-debug-baseUpgrade kernel-traceUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-vanilla-baseUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-vanilla-develUpgrade kernel-develUpgrade kernel-xenUpgrade kgraft-patch-4_4_180-94_164-default | Aug 9, 2024 | Mar 8, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-130-powerpc-e500mcUpgrade linux-image-4.13.0-46-generic-lpaeUpgrade linux-image-4.4.0-1029-kvmUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-4.15.0-1014-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.13.0-46-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-130-lowlatencyUpgrade linux-image-4.4.0-130-generic-lpaeUpgrade linux-image-4.4.0-130-powerpc64-smpUpgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-4.4.0-1092-raspi2Upgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-4.4.0-1095-snapdragonUpgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.4.0-130-genericUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-4.4.0-1024-awsUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1011-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-kvmUpgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-awsUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-130-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.15.0-24-genericUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-4.13.0-46-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-153-powerpc64-embUpgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-4.13.0-1023-raspi2Upgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-4.13.0-1031-oemUpgrade linux-image-4.4.0-130-powerpc-smpUpgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smp | Jul 4, 2018 | Mar 8, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub