CVE-2018-18445
Fixed in a distro release EPSS <1%
In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.
Products: linux_kernel, canonical ubuntu_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | linux | 4.18.13.arch1-1 |
| Arch Linux | linux-lts | 4.14.75-1 |
| Debian 12 | linux | 4.18.20-1 |
| Debian 13 | linux | 4.18.20-1 |
| Debian 14 | linux | 4.18.20-1 |
| Red Hat Enterprise Linux 7 | bpftool | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-abi-whitelists | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-bootwrapper | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug-debuginfo | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug-devel | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-ppc64 | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-ppc64le | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-s390x | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-x86_64 | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-devel | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-doc | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-headers | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump-debuginfo | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump-devel | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-debuginfo | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-libs | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-libs-devel | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | perf | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | perf-debuginfo | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | python-perf | 0:3.10.0-957.10.1.el7 |
| Red Hat Enterprise Linux 7 | python-perf-debuginfo | 0:3.10.0-957.10.1.el7 |
| Red Hat rhel extras rt 7 | kernel-rt | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-debuginfo | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-devel | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-kvm | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-kvm-debuginfo | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debuginfo | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debuginfo-common-x86_64 | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-devel | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-doc | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-kvm | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-kvm-debuginfo | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-debuginfo | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-devel | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-kvm | 0:3.10.0-957.10.1.rt56.921.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-kvm-debuginfo | 0:3.10.0-957.10.1.rt56.921.el7 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-default | 4.12.14-95.3.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-source | 4.12.14-95.3.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-syms | 4.12.14-95.3.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP4 | kernel-default | 4.12.14-95.3.1 |
| SUSE Linux Enterprise High Availability Extension 15 | kernel-default | 4.12.14-25.25.1 |
| SUSE Linux Enterprise Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_1 | 1-7.1 |
| SUSE Linux Enterprise Live Patching 15 | kernel-default | 4.12.14-25.25.1 |
| SUSE Linux Enterprise Live Patching 15 | kernel-livepatch-SLE15_Update_7 | 1-1.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-default | 4.12.14-25.25.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-source | 4.12.14-25.25.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-zfcpdump | 4.12.14-25.25.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-docs | 4.12.14-25.25.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-obs-build | 4.12.14-25.25.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-source | 4.12.14-25.25.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-syms | 4.12.14-25.25.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-vanilla | 4.12.14-25.25.1 |
| SUSE Linux Enterprise Module for Legacy 15 | kernel-default | 4.12.14-25.25.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-azure | 4.12.14-5.16.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-source-azure | 4.12.14-5.16.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-syms-azure | 4.12.14-5.16.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-azure | 4.12.14-6.3.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-default | 4.12.14-95.3.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-source | 4.12.14-95.3.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-source-azure | 4.12.14-6.3.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-syms | 4.12.14-95.3.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-syms-azure | 4.12.14-6.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-azure | 4.12.14-6.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-default | 4.12.14-95.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source | 4.12.14-95.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source-azure | 4.12.14-6.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-syms | 4.12.14-95.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-syms-azure | 4.12.14-6.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | kernel-docs | 4.12.14-95.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | kernel-obs-build | 4.12.14-95.3.2 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | kernel-default | 4.12.14-95.3.1 |
| SUSE Linux Enterprise Workstation Extension 15 | kernel-default | 4.12.14-25.25.1 |
| Ubuntu 14.04 LTS | linux-azure | 4.15.0-1036.38~14.04.2 |
| Ubuntu 16.04 LTS | linux-aws-hwe | 4.15.0-1031.33~16.04.1 |
| Ubuntu 16.04 LTS | linux-azure | 4.15.0-1036.38~16.04.1 |
| Ubuntu 16.04 LTS | linux-gcp | 4.15.0-1026.27~16.04.1 |
| Ubuntu 16.04 LTS | linux-hwe | 4.15.0-43.46~16.04.1 |
| Ubuntu 18.04 LTS | linux | 4.15.0-43.46 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1031.33 |
| Ubuntu 18.04 LTS | linux-azure | 4.15.0-1036.38 |
| Ubuntu 18.04 LTS | linux-gcp | 4.15.0-1026.27 |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1028.28 |
| Ubuntu 18.04 LTS | linux-oem | 4.15.0-1030.35 |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1030.32 |