The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Apr 23, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | Apr 23, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-headers | May 29, 2018 | Apr 23, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf | Sep 27, 2018 | Apr 23, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Jul 3, 2018 | Apr 23, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 23, 2018 | Mar 21, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 31, 2018 | Apr 23, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-docs | May 10, 2018 | Apr 23, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-151-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-151-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-127-powerpc-e500mcUpgrade linux-image-4.13.0-1019-gcpUpgrade linux-image-oemUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-127-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-127-powerpc64-embUpgrade linux-image-3.13.0-151-powerpc-e500Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-127-powerpc-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.13.0-45-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.13.0-45-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1022-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.13.0-1022-raspi2Upgrade linux-image-raspi2Upgrade linux-image-3.13.0-151-generic-lpaeUpgrade linux-image-4.4.0-127-generic-lpaeUpgrade linux-image-4.13.0-1030-oemUpgrade linux-image-3.13.0-151-powerpc64-embUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-151-powerpc-e500mcUpgrade linux-image-3.13.0-151-lowlatencyUpgrade linux-image-4.4.0-1090-raspi2Upgrade linux-image-4.4.0-1093-snapdragonUpgrade linux-image-4.4.0-127-genericUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-4.13.0-45-genericUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-4.4.0-127-lowlatencyUpgrade linux-image-3.13.0-151-powerpc-smpUpgrade linux-image-4.4.0-1026-kvm | May 29, 2018 | Apr 23, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub