CVE-2018-11508 PUBLISHED

The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.

EPSS 1.54% · 81.2th percentile

Risk Scores

EPSS Score
1.54%
81.2th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux4.13.0-16.19, 4.15.0-19.20, 4.15.0-15.16
Ubuntu:18.04:LTSlinux-raspi24.15.0-1012.13, 4.15.0-1011.12, 4.15.0-1010.11
Ubuntu:16.04:LTSlinux-oem4.13.0-1008.9, 4.13.0-1030.33, 4.13.0-1028.31
Ubuntu:18.04:LTSlinux-kvm4.15.0-1006.6, 0, 4.15.0-1002.2
Ubuntu:16.04:LTSlinux-hwe4.10.0-30.34~16.04.1, 4.8.0-39.42~16.04.1, 4.8.0-36.36~16.04.1
Ubuntu:18.04:LTSlinux-aws4.15.0-1006.6, 4.15.0-1007.7, 4.15.0-1009.9
Ubuntu:18.04:LTSlinux-azure4.15.0-1012.12, 4.15.0-1009.9, 4.15.0-1008.8
Ubuntu:16.04:LTSlinux-azure4.13.0-1012.15, 4.15.0-1013.13~16.04.2, 4.13.0-1018.21
Ubuntu:16.04:LTSlinux-gcp4.10.0-1009.9, 4.10.0-1008.8, 0
Ubuntu:18.04:LTSlinux-gcp4.15.0-1001.1, 4.15.0-1003.3, 4.15.0-1005.5
Ubuntu:18.04:LTSlinux-oem4.15.0-1004.5, 4.15.0-1002.3, 0

Timeline

References

Open in Interactive Console →