The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Apr 23, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | Apr 23, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-headers | May 29, 2018 | Apr 23, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debugUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo | Sep 27, 2018 | Apr 23, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libs | Jul 3, 2018 | Apr 23, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 23, 2018 | Mar 21, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 31, 2018 | Apr 23, 2018 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default | May 10, 2018 | Apr 23, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.13.0-1030-oemUpgrade linux-image-4.4.0-1093-snapdragonUpgrade linux-image-4.13.0-1022-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-127-lowlatencyUpgrade linux-image-4.13.0-45-genericUpgrade linux-image-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-45-lowlatencyUpgrade linux-image-4.4.0-127-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-127-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-3.13.0-151-powerpc-e500mcUpgrade linux-image-3.13.0-151-powerpc-smpUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-3.13.0-151-generic-lpaeUpgrade linux-image-3.13.0-151-powerpc64-embUpgrade linux-image-4.4.0-1090-raspi2Upgrade linux-image-4.4.0-1022-awsUpgrade linux-image-4.4.0-1026-kvmUpgrade linux-image-3.13.0-151-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.13.0-1019-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-127-powerpc-smpUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-127-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.13.0-45-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-151-genericUpgrade linux-image-4.4.0-127-powerpc64-smpUpgrade linux-image-3.13.0-151-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-151-powerpc-e500Upgrade linux-image-4.4.0-127-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenial | May 29, 2018 | Apr 23, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub