vulnerability
Ubuntu: (Multiple Advisories) (CVE-2018-1118): Linux kernel vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 2 | (AV:L/AC:L/Au:N/C:P/I:N/A:N) | May 10, 2018 | Sep 19, 2018 | Jan 23, 2025 |
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
May 10, 2018
Added
Sep 19, 2018
Modified
Jan 23, 2025
Description
Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.
Solution(s)
ubuntu-upgrade-linux-image-4-15-0-1019-gcpubuntu-upgrade-linux-image-4-15-0-1021-awsubuntu-upgrade-linux-image-4-15-0-1021-kvmubuntu-upgrade-linux-image-4-15-0-1022-raspi2ubuntu-upgrade-linux-image-4-15-0-1023-azureubuntu-upgrade-linux-image-4-15-0-34-genericubuntu-upgrade-linux-image-4-15-0-34-generic-lpaeubuntu-upgrade-linux-image-4-15-0-34-lowlatencyubuntu-upgrade-linux-image-4-15-0-34-snapdragonubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-edgeubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.