Vulnetix
Try Vulnetix Request Demo
CVE-2018-1118 PUBLISHED

Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.

EPSS 0.11% · 29.0th percentile

Risk Scores

EPSS Score
0.11%
29.0th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-raspi24.13.0-1008.8, 4.13.0-1005.5, 4.13.0-1006.6
Ubuntu:18.04:LTSlinux4.13.0-32.35, 4.13.0-25.29, 4.13.0-16.19
Ubuntu:18.04:LTSlinux-azure4.15.0-1004.4, 4.15.0-1003.3, 4.15.0-1002.2
Ubuntu:18.04:LTSlinux-aws4.15.0-1007.7, 0, 4.15.0-1001.1
Ubuntu:16.04:LTSlinux-azure0, 4.11.0-1009.9, 4.11.0-1011.11
Ubuntu:18.04:LTSlinux-oem4.15.0-1012.15, 4.15.0-1017.20, 4.15.0-1004.5
Ubuntu:16.04:LTSlinux-gcp4.13.0-1006.9, 4.13.0-1013.17, 4.13.0-1015.19
Ubuntu:18.04:LTSlinux-kvm4.15.0-1017.17, 4.15.0-1016.16, 4.15.0-1011.11
Ubuntu:18.04:LTSlinux-gcp4.15.0-1001.1, 0, 4.15.0-1003.3
Ubuntu:16.04:LTSlinux-hwe*, *, *

Timeline

References

Open in Interactive Console →