CVE-2018-5995 PUBLISHED

The pcpu_embed_first_chunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "pages/cpu" printk call.

EPSS 0.05% · 17.0th percentile

Risk Scores

EPSS Score
0.05%
17.0th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSlinux-kvm4.4.0-1100.109, 4.4.0-1058.65, 4.4.0-1059.66
Ubuntu:16.04:LTSlinux-hwe4.10.0-35.39~16.04.1, 4.10.0-37.41~16.04.1, 4.10.0-38.42~16.04.1
Ubuntu:Pro:16.04:LTSlinux-aws4.4.0-1055.64, 4.4.0-1137.151, 4.4.0-1135.149
Ubuntu:Pro:14.04:LTSlinux-aws4.4.0-1092.96, 4.4.0-1042.45, 4.4.0-1044.47
Ubuntu:16.04:LTSlinux-gcp4.13.0-1006.9, 4.13.0-1008.11, 4.13.0-1011.15
Ubuntu:Pro:16.04:LTSlinux4.4.0-208.240, 4.4.0-206.238, 4.4.0-204.236
Ubuntu:Pro:14.04:LTSlinux-lts-xenial4.4.0-63.84~14.04.2, 0, 4.4.0-13.29~14.04.1
Ubuntu:Pro:14.04:LTSlinux3.13.0-37.64, 3.13.0-8.28, 3.13.0-8.27
Ubuntu:18.04:LTSlinux-snapdragon4.4.0-1078.83, 4.4.0-1077.82, 4.4.0-1079.84
Ubuntu:16.04:LTSlinux-azure4.13.0-1007.9, 4.13.0-1006.8, 4.13.0-1005.7

Timeline

References

Open in Interactive Console →