An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perf-debuginfoUpgrade python-perf-debuginfo | Apr 27, 2020 | Mar 8, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Mar 8, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Mar 8, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Mar 8, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade perf | Dec 11, 2019 | Mar 8, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 7, 2018 | Mar 8, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 7, 2019 | Mar 8, 2018 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-trace-develUpgrade kernel-default-kgraftUpgrade kernel-xen-baseUpgrade kernel-ec2Upgrade kernel-ec2-baseUpgrade kernel-xen-develUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-debug-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-zfcpdump-manUpgrade kernel-azure-baseUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-default-baseUpgrade kernel-xenUpgrade kernel-azureUpgrade kernel-vanilla-baseUpgrade kernel-vanilla-develUpgrade kernel-obs-buildUpgrade kernel-vanilla-livepatch-develUpgrade kernel-develUpgrade kernel-source-azureUpgrade kernel-trace-baseUpgrade kernel-kvmsmall-base | Aug 9, 2024 | Mar 8, 2018 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1095-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1092-raspi2Upgrade linux-image-4.15.0-1014-azureUpgrade linux-image-4.4.0-130-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.4.0-1024-awsUpgrade linux-image-4.4.0-130-genericUpgrade linux-image-4.4.0-130-lowlatencyUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-4.13.0-46-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-4.4.0-130-powerpc64-smpUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-4.4.0-1029-kvmUpgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-4.13.0-46-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-130-generic-lpaeUpgrade linux-image-4.4.0-130-powerpc64-embUpgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-130-powerpc-smpUpgrade linux-image-4.15.0-24-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-1023-raspi2Upgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-kvmUpgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.13.0-46-genericUpgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1011-awsUpgrade linux-image-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.13.0-1031-oemUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-153-powerpc64-emb | Jul 4, 2018 | Mar 8, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub