CVE-2018-18653: High severity Canonical Ubuntu Linux vulnerability
Last updated 25 August 2025
Other sources
The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 7.1.13-1 - Compensating control
If possible, boot Ubuntu 18.10 systems without UEFI Secure Boot enabled to prevent privileged local users from bypassing intended Secure Boot restrictions via arbitrary kernel module loading.
Event History
Frequently Asked Questions
What is the vulnerability ID of this Linux kernel vulnerability?
The vulnerability ID of this Linux kernel vulnerability is CVE-2018-18653.
Which version of Ubuntu is affected by this vulnerability?
Ubuntu 18.10 is affected by this vulnerability.
What is the impact of this vulnerability?
The impact of this vulnerability is that privileged local users can bypass Secure Boot restrictions and execute untrusted code.
How can this vulnerability be exploited?
This vulnerability can be exploited by loading arbitrary kernel modules.
Is there a fix available for this vulnerability?
Yes, there are fixes available for this vulnerability. Please refer to the provided references for more information.