CVE-2018-5995: Infoleak
Last updated 24 July 2024
Other sources
The pcpuembedfirstchunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "pages/cpu" printk call.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5995?
CVE-2018-5995 is considered to have a moderate severity level as it allows local users to access sensitive information.
How do I fix CVE-2018-5995?
To mitigate CVE-2018-5995, it is recommended to upgrade the Linux kernel to versions 5.10.223-1, 5.10.234-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.17-1.
Which versions of the Linux kernel are affected by CVE-2018-5995?
CVE-2018-5995 affects the Linux kernel versions up to and including 4.14.14.
Who is impacted by the CVE-2018-5995 vulnerability?
Local users of the affected Linux kernel versions can be impacted by CVE-2018-5995.
What kind of information can be leaked due to CVE-2018-5995?
CVE-2018-5995 can potentially leak sensitive address information through dmesg output.