An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel | Apr 27, 2020 | Mar 8, 2018 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Mar 8, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Mar 8, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Mar 8, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-tools | Dec 11, 2019 | Mar 8, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 7, 2018 | Mar 8, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 7, 2019 | Mar 8, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-trace-develUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-default-manUpgrade kernel-default-kgraftUpgrade kernel-macrosUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-ec2-baseUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade kernel-azure-baseUpgrade kernel-debug-baseUpgrade kernel-kvmsmall-baseUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-source-azureUpgrade kernel-vanilla-develUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-xenUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-trace-baseUpgrade kernel-vanilla-baseUpgrade kernel-default-base | Aug 9, 2024 | Mar 8, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-4.4.0-130-generic-lpaeUpgrade linux-image-4.4.0-1095-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-130-lowlatencyUpgrade linux-image-4.4.0-1024-awsUpgrade linux-image-4.4.0-130-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-oemUpgrade linux-image-4.4.0-1029-kvmUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-4.13.0-46-generic-lpaeUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-4.4.0-130-genericUpgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-4.4.0-130-powerpc-e500mcUpgrade linux-image-4.15.0-1014-azureUpgrade linux-image-4.13.0-46-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1092-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.13.0-1023-raspi2Upgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-4.4.0-130-powerpc64-embUpgrade linux-image-4.15.0-24-genericUpgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-153-powerpc64-embUpgrade linux-image-4.4.0-130-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1011-awsUpgrade linux-image-4.13.0-1031-oemUpgrade linux-image-4.13.0-46-genericUpgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-azure | Jul 4, 2018 | Mar 8, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub