PT-2018-9618 · Linux+2 · Linux Kernel+2

Marcus Meissner · Published 2018-04-06 · Updated 2024-08-05 · CVE-2018-10021

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.16

Description: The issue allows local users to cause a denial of service (ata qc leak) by triggering certain failure conditions, specifically when physically proximate attackers unplug SAS Host Bus Adapter cables. A third party disputes the relevance of this report.

Recommendations: Update to Linux kernel version 4.16 or later to resolve the issue. As a temporary workaround, consider restricting physical access to SAS Host Bus Adapter cables to minimize the risk of exploitation.

Fix

Related Identifiers

ALT-PU-2018-1557

ALT-PU-2019-1433

CVE-2018-10021

DLA-1423-1

DLA-1529-1

USN-3678-1

USN-3678-2

USN-3678-3

USN-3678-4

USN-3696-1

USN-3696-2

USN-3754-1

Affected Products

Alt Linux

Linux Kernel

Ubuntu

References · 93

• https://ubuntu.com/security/CVE-2018-1093 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13094 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-2671 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10021 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16538 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-3665 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3696-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16536 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-10021 · Security Note
• https://osv.dev/vulnerability/USN-3754-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10877 · Vendor Advisory
• https://usn.ubuntu.com/3678-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16537 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3678-1 · Vendor Advisory