cbcvebase.
CVE-2018-7755
published 2018-03-08

CVE-2018-7755: An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel…

PriorityP426medium5.5CVSS 3.0
AVLACLPRLUINSUCHINAN
EPSS
0.68%
49.0th percentile
An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.

Affected

15 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debianlinux< linux 4.18.10-1 (bookworm)linux 4.18.10-1 (bookworm)
linuxlinux_kernel<= 4.15.7
linuxlinux_kernel>= 0 < 4.18.10-14.18.10-1
linuxlinux_kernel>= 0 < 4.18.10-14.18.10-1
linuxlinux_kernel>= 0 < 4.18.10-14.18.10-1
linuxlinux_kernel>= 0 < 4.18.10-14.18.10-1
linuxlinux_kernel>= 0 < 3.13.0-153.2033.13.0-153.203
linuxlinux_kernel>= 0 < 4.4.0-130.1564.4.0-130.156
linuxlinux_kernel>= 0 < 4.15.0-24.264.15.0-24.26
linuxlinux_kernel>= 0 < 4.15.0-29.314.15.0-29.31

CVSS provenance

nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.