The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8 does not validate certain resource availability, which allows local users to cause a denial of service (NULL pointer dereference).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Aug 25, 2020 | Mar 10, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 10, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 12, 2018 | Jan 11, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 10, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-azure-base | Apr 19, 2018 | Mar 10, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.13.0-1013-gcpUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.13.0-1024-oemUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.13.0-39-genericUpgrade linux-image-gkeUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-4.13.0-1017-raspi2Upgrade linux-image-4.13.0-39-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-4.13.0-39-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws | Apr 25, 2018 | Mar 10, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 10, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub