An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo | Apr 27, 2020 | Sep 7, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade-kernel | Oct 5, 2018 | Sep 7, 2018 |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Aug 28, 2019 | Sep 7, 2018 |
| Debian | debian-upgrade-linux | Oct 2, 2018 | Sep 7, 2018 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Jan 31, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-kernelhuawei-euleros-2_0_sp2-upgrade-kernel-debughuawei-euleros-2_0_sp2-upgrade-kernel-debug-develhuawei-euleros-2_0_sp2-upgrade-kernel-debuginfohuawei-euleros-2_0_sp2-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp2-upgrade-kernel-develhuawei-euleros-2_0_sp2-upgrade-kernel-headershuawei-euleros-2_0_sp2-upgrade-kernel-toolshuawei-euleros-2_0_sp2-upgrade-kernel-tools-libshuawei-euleros-2_0_sp2-upgrade-perfhuawei-euleros-2_0_sp2-upgrade-python-perf | Dec 31, 2018 | Sep 7, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-kernelhuawei-euleros-2_0_sp3-upgrade-kernel-debuginfohuawei-euleros-2_0_sp3-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp3-upgrade-kernel-develhuawei-euleros-2_0_sp3-upgrade-kernel-headershuawei-euleros-2_0_sp3-upgrade-kernel-toolshuawei-euleros-2_0_sp3-upgrade-kernel-tools-libshuawei-euleros-2_0_sp3-upgrade-perfhuawei-euleros-2_0_sp3-upgrade-python-perf | Feb 15, 2019 | Sep 7, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-kernelhuawei-euleros-2_0_sp5-upgrade-kernel-debuginfohuawei-euleros-2_0_sp5-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp5-upgrade-kernel-develhuawei-euleros-2_0_sp5-upgrade-kernel-headershuawei-euleros-2_0_sp5-upgrade-kernel-toolshuawei-euleros-2_0_sp5-upgrade-kernel-tools-libshuawei-euleros-2_0_sp5-upgrade-perfhuawei-euleros-2_0_sp5-upgrade-python-perf | Feb 15, 2019 | Sep 7, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Sep 27, 2018 | Apr 26, 2018 |
| Redhat_linux | — | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Aug 7, 2019 | Sep 7, 2018 |
| Suse | — | suse-upgrade-kernel-azure-basesuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-default-mansuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-docssuse-upgrade-kernel-docs-azuresuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-source-azure | Sep 17, 2018 | Sep 7, 2018 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-162-genericubuntu-upgrade-linux-image-3-13-0-162-generic-lpaeubuntu-upgrade-linux-image-3-13-0-162-lowlatencyubuntu-upgrade-linux-image-3-13-0-162-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-162-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-162-powerpc-smpubuntu-upgrade-linux-image-3-13-0-162-powerpc64-embubuntu-upgrade-linux-image-3-13-0-162-powerpc64-smpubuntu-upgrade-linux-image-4-15-0-1024-gcpubuntu-upgrade-linux-image-4-15-0-1026-kvmubuntu-upgrade-linux-image-4-15-0-1026-oemubuntu-upgrade-linux-image-4-15-0-1027-awsubuntu-upgrade-linux-image-4-15-0-1028-raspi2ubuntu-upgrade-linux-image-4-15-0-1031-azureubuntu-upgrade-linux-image-4-15-0-39-genericubuntu-upgrade-linux-image-4-15-0-39-generic-lpaeubuntu-upgrade-linux-image-4-15-0-39-lowlatencyubuntu-upgrade-linux-image-4-15-0-39-snapdragonubuntu-upgrade-linux-image-4-4-0-1032-awsubuntu-upgrade-linux-image-4-4-0-1036-kvmubuntu-upgrade-linux-image-4-4-0-1070-awsubuntu-upgrade-linux-image-4-4-0-1099-raspi2ubuntu-upgrade-linux-image-4-4-0-1103-snapdragonubuntu-upgrade-linux-image-4-4-0-138-genericubuntu-upgrade-linux-image-4-4-0-138-generic-lpaeubuntu-upgrade-linux-image-4-4-0-138-lowlatencyubuntu-upgrade-linux-image-4-4-0-138-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-138-powerpc-smpubuntu-upgrade-linux-image-4-4-0-138-powerpc64-embubuntu-upgrade-linux-image-4-4-0-138-powerpc64-smpubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon | Oct 31, 2018 | Sep 7, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Sep 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub