PT-2018-17123 · Linux+4 · Linux Kernel+4

Wang Qize · Published 2018-01-26 · Updated 2019-03-07 · CVE-2018-5750

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.16

Description: The issue allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call. This is due to a problem in the acpi smbus hc add function in drivers/acpi/sbshc.c.

Recommendations: For Linux kernel versions prior to 4.14.16, update to version 4.14.16 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2018-1111

ALT-PU-2018-1991

CESA-2018_1062

CVE-2018-5750

DLA-1369-1

DSA-4120-1

DSA-4120-2

DSA-4187-1

RHSA-2018:0676

RHSA-2018:1062

RHSA-2018:2948

RHSA-2018_0676

RHSA-2018_1062

USN-3631-1

USN-3631-2

USN-3697-1

USN-3697-2

USN-3698-1

USN-3698-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Ubuntu

References · 48

• https://ubuntu.com/security/notices/USN-3697-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-7757 · Vendor Advisory
• https://patchwork.kernel.org/patch/10174835 · Patch
• https://usn.ubuntu.com/3698-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-5750 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:1062 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4120-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-15265 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1130 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-7755 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3631-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-7566 · Vendor Advisory
• https://usn.ubuntu.com/3697-1 · Vendor Advisory
• https://debian.org/security/2018/dsa-4120 · Vendor Advisory
• https://usn.ubuntu.com/3631-1 · Vendor Advisory