CVE-2018-7273

 

Published at: - 21-02-2018 01:29

Last modified: - 26-10-2022 01:44

Total changes: - 3

Description

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://lkml.org/lkml/2018/2/20/669
• 103088-Third Party Advisory, VDB Entry
• 44325-Exploit, Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2018-7273

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures