PT-2018-2683 · Linux+5 · Linux Kernel+5

Scott Bauer · Published 2018-04-26 · Updated 2019-09-10 · CVE-2018-16658

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.18.6

Description The issue is related to an information leak in the cdrom ioctl drive status() function in the Linux kernel, which could allow local attackers to read kernel memory. This is due to a cast from unsigned long to int that interferes with bounds checking, leading to potential data exposure. The vulnerability is associated with errors in data processing.

Recommendations For Linux kernel versions prior to 4.18.6, update to version 4.18.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the cdrom ioctl drive status() function to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2018-2281

ALT-PU-2018-2333

ALT-PU-2018-2679

ALT-PU-2018-2726

ALT-PU-2018-2729

ALT-PU-2018-2814

ALT-PU-2019-1433

BDU:2019-01343

CESA-2019_2029

CVE-2018-16658

DLA-1529-1

DLA-1531-1

DSA-4308-1

OPENSUSE-SU-2018_2738-1

OPENSUSE-SU-2018_3071-1

RHSA-2019:2029

RHSA-2019:2043

RHSA-2019:4154

RHSA-2019_2029

RHSA-2019_2043

SUSE-SU-2018:2775-1

SUSE-SU-2018:2776-1

SUSE-SU-2018:2858-1

SUSE-SU-2018:2862-1

SUSE-SU-2018:2879-1

SUSE-SU-2018:2907-1

SUSE-SU-2018:2908-1

SUSE-SU-2018:2908-2

SUSE-SU-2018:2980-1

SUSE-SU-2018:2981-1

SUSE-SU-2018:3083-1

SUSE-SU-2018:3084-1

SUSE-SU-2018:3088-1

SUSE-SU-2018:3961-1

USN-3797-1

USN-3797-2

USN-3820-1

USN-3820-2

USN-3820-3

USN-3822-1

USN-3822-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 576

• https://github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4 · Patch
• https://ubuntu.com/security/notices/USN-3797-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-15471 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:4154 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2018-4250.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-3820-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-13168 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3820-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2858-1 · Vendor Advisory
• https://usn.ubuntu.com/3797-2 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-16658 · Security Note
• https://usn.ubuntu.com/3820-3 · Vendor Advisory
• https://usn.ubuntu.com/3797-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2907-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01343 · Security Note