Vulnerability CVE-2018-7755: Information

Description

An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.

Severity: MEDIUM (5.5) Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2018-7755

Published: March 8, 2018

Modified: Oct. 4, 2018

Error type identifier: CWE-200

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
kernel-image-std-def	sisyphus	4.14.76-alt1	6.1.87-alt1	ALT-PU-2018-2502-1	214987	Fixed
kernel-image-std-def	p10	4.14.76-alt1	5.10.213-alt1	ALT-PU-2018-2502-1	214987	Fixed
kernel-image-std-def	p9	4.14.76-alt1	5.4.274-alt1	ALT-PU-2018-2502-1	214987	Fixed
kernel-image-std-def	p8	4.9.131-alt0.M80P.1	4.9.337-alt0.M80P.1	ALT-PU-2018-2441-1	214064	Fixed
kernel-image-std-def	c9f2	4.14.76-alt1	5.10.214-alt0.c9f.2	ALT-PU-2018-2502-1	214987	Fixed
kernel-image-std-def	c7	4.4.183-alt0.M70C.1	4.4.277-alt0.M70C.1	ALT-PU-2019-2175-1	233233	Fixed
kernel-image-std-pae	c9f2	4.4.161-alt1	4.19.72-alt1	ALT-PU-2018-2492-1	214991	Fixed
kernel-image-un-def	sisyphus	4.16.0-alt1	6.6.28-alt1	ALT-PU-2018-1557-1	203434	Fixed
kernel-image-un-def	p10	4.16.0-alt1	6.1.85-alt1	ALT-PU-2018-1557-1	203434	Fixed
kernel-image-un-def	p9	4.16.0-alt1	5.10.215-alt1	ALT-PU-2018-1557-1	203434	Fixed
kernel-image-un-def	p8	4.14.74-alt0.M80P.1	4.19.310-alt0.M80P.1	ALT-PU-2018-2438-1	214063	Fixed
kernel-image-un-def	c10f1	4.16.0-alt1	6.1.85-alt0.c10f.1	ALT-PU-2018-1557-1	203434	Fixed
kernel-image-un-def	c9f2	4.16.0-alt1	5.10.29-alt2	ALT-PU-2018-1557-1	203434	Fixed
kernel-image-un-def	c7	4.9.277-alt0.M70C.1	4.9.277-alt0.M70C.1	ALT-PU-2021-3032-1	281292	Fixed
usbip	sisyphus	5.10-alt1	5.10-alt1	ALT-PU-2023-1798-1	320453	Fixed
usbip	sisyphus_e2k	5.10-alt1	5.10-alt1	ALT-PU-2023-7452-1	-	Fixed
usbip	p10	5.10-alt1	5.10-alt1	ALT-PU-2023-1903-1	320461	Fixed
usbip	p10_e2k	5.10-alt1	5.10-alt1	ALT-PU-2023-7498-1	-	Fixed

References to Advisories, Solutions, and Tools

Hyperlink	Resource
https://lkml.org/lkml/2018/3/7/1116	Exploit Third Party Advisory
USN-3698-2	Third Party Advisory
USN-3697-2	Third Party Advisory
USN-3697-1	Third Party Advisory
USN-3696-2	Third Party Advisory
USN-3696-1	Third Party Advisory
USN-3695-2	Third Party Advisory
USN-3695-1	Third Party Advisory
USN-3698-1	Third Party Advisory
DSA-4308
[debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update
RHSA-2019:2043
RHSA-2019:2029

Affected configurations:
1. Configuration 1
  cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  End including
  4.15.7
  
  Configuration 2
  cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
  cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
  cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
  cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
  cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Version: v24.4.2

Vulnerability CVE-2018-7755: Information

Description

Fixed packages

References to Advisories, Solutions, and Tools

Configuration 1

Configuration 2