CVE-2018-11506: Buffer Overflow
Last updated 4 July 2026
Other sources
The srdoioctl function in drivers/scsi/srioctl.c in the Linux kernel allows local users to cause a denial of service via a stack-based buffer overflow or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer.
An upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f7068114d45ec55996b9040e98111afa56e010fe
— Red Hat
The srdoioctl function in drivers/scsi/srioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as demonstrated by a CDROMREADMODE2 ioctl call.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.17 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1 - Upgrade
Upgrade
Linux kernel (drivers/scsi/sr_ioctl.c)to a version that resolves this vulnerability.Fixed in 4.16.12
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-11506.
What is the severity of CVE-2018-11506?
The severity of CVE-2018-11506 is medium.
What is the affected software for CVE-2018-11506?
The affected software for CVE-2018-11506 includes Linux kernel versions through 4.16.12.
How does CVE-2018-11506 impact the system?
CVE-2018-11506 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact.
Are there any references for CVE-2018-11506?
Yes, references for CVE-2018-11506 include: [1] http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f7068114d45ec55996b9040e98111afa56e010fe, [2] https://github.com/torvalds/linux/commit/f7068114d45ec55996b9040e98111afa56e010fe, [3] https://twitter.com/efrmv/status/1001574894273007616.