Every CVE Search/ Get API key

CVE-2018-9385

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect...

7.8 HighFix available

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.26%Unchanged since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.8

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel.

Record
CVE-2018-9385
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel.

Record
CVE-2018-9385
Updated
2026-11-02
EUVDEUVD-2018-20979 No score

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel.

Record
EUVD-2018-20979
Updated
2026-11-03
GitHub AdvisoriesGHSA-x85p-qff8-qjww 7.8

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect...

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel.

Record
GHSA-x85p-qff8-qjww
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSV 7.8

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel.

Record
CVE-2018-9385
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-9385 7.8

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel.

Record
DEBIAN-CVE-2018-9385
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVUBUNTU-CVE-2018-9385 7.8

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74128061 References: Upstream kernel.

Record
UBUNTU-CVE-2018-9385
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVSUSE-SU-2018:2051-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.140 to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2018-13053: The alarm_timer_nsleep function had an integer overflow via a large relative timeout because ktime_add_safe was not used (bnc#1099924)
  • CVE-2018-9385: Prevent overread of the 'driver_override' buffer (bsc#1100491)
  • CVE-2018-13405: The inode_init_owner function allowed local users to create files with an unintended group ownership allowing attackers to escalate privileges by making a plain file executable and SGID (bnc#1100416)
  • CVE-2018-13406: An integer overflow in the uvesafb_setcmap function could have result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used (bnc#1100418)

The following non-security bugs were fixed:

  • 1wire: family module autoload fails because of upper/lower case mismatch (bnc#1012382).
  • ALSA: hda - Clean up ALC299 init code (bsc#1099810).
  • ALSA: hda - Enable power_save_node for CX20722 (bsc#1099810).
  • ALSA: hda - Fix a wrong FIXUP for alc289 on Dell machines (bsc#1099810).
  • ALSA: hda - Fix incorrect usage of IS_REACHABLE() (bsc#1099810).
  • ALSA: hda - Fix pincfg at resume on Lenovo T470 dock (bsc#1099810).
  • ALSA: hda - Handle kzalloc() failure in snd_hda_attach_pcm_stream() (bnc#1012382).
  • ALSA: hda - Use acpi_dev_present() (bsc#1099810).
  • ALSA: hda - add a new condition to check if it is thinkpad (bsc#1099810).
  • ALSA: hda - silence uninitialized variable warning in activate_amp_in() (bsc#1099810).
  • ALSA: hda/patch_sigmatel: Add AmigaOne X1000 pinconfigs (bsc#1099810).
  • ALSA: hda/realtek - Add a quirk for FSC ESPRIMO U9210 (bsc#1099810).
  • ALSA: hda/realtek - Add headset mode support for Dell laptop (bsc#1099810).
  • ALSA: hda/realtek - Add support headset mode for DELL WYSE (bsc#1099810).
  • ALSA: hda/realtek - Clevo P950ER ALC1220 Fixup (bsc#1099810).
  • ALSA: hda/realtek - Enable Thinkpad Dock device for ALC298 platform (bsc#1099810).
  • ALSA: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (bsc#1099810).
  • ALSA: hda/realtek - Fix Dell headset Mic can't record (bsc#1099810).
  • ALSA: hda/realtek - Fix pop noise on Lenovo P50 and co (bsc#1099810).
  • ALSA: hda/realtek - Fix the problem of two front mics on more machines (bsc#1099810).
  • ALSA: hda/realtek - Fixup for HP x360 laptops with BandO speakers (bsc#1099810).
  • ALSA: hda/realtek - Fixup mute led on HP Spectre x360 (bsc#1099810).
  • ALSA: hda/realtek - Make dock sound work on ThinkPad L570 (bsc#1099810).
  • ALSA: hda/realtek - Refactor alc269_fixup_hp_mute_led_mic*() (bsc#1099810).
  • ALSA: hda/realtek - Reorder ALC269 ASUS quirk entries (bsc#1099810).
  • ALSA: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (bsc#1099810).
  • ALSA: hda/realtek - Update ALC255 depop optimize (bsc#1099810).
  • ALSA: hda/realtek - adjust the location of one mic (bsc#1099810).
  • ALSA: hda/realtek - change the location for one of two front mics (bsc#1099810).
  • ALSA: hda/realtek - set PINCFG_HEADSET_MIC to parse_flags (bsc#1099810).
  • ALSA: hda/realtek - update ALC215 depop optimize (bsc#1099810).
  • ALSA: hda/realtek - update ALC225 depop optimize (bsc#1099810).
  • ALSA: hda/realtek: Fix mic and headset jack sense on Asus X705UD (bsc#1099810).
  • ALSA: hda/realtek: Limit mic boost on T480 (bsc#1099810).
  • ALSA: hda: Fix forget to free resource in error handling code path in hda_codec_driver_probe (bsc#1099810).
  • ALSA: hda: add dock and led support for HP EliteBook 830 G5 (bsc#1099810).
  • ALSA: hda: add dock and led support for HP ProBook 640 G4 (bsc#1099810).
  • ALSA: hda: fix some klockwork scan warnings (bsc#1099810).
  • ARM: 8764/1: kgdb: fix NUMREGBYTES so that gdb_regs[] is the correct size (bnc#1012382).
  • ARM: dts: imx6q: Use correct SDMA script for SPI5 core (bnc#1012382).
  • ASoC: cirrus: i2s: Fix LRCLK configuration (bnc#1012382).
  • ASoC: cirrus: i2s: Fix {TX|RX}LinCtrlData setup (bnc#1012382). -…
Record
SUSE-SU-2018:2051-1
Updated
2026-11-02
OSVSUSE-SU-2018:2092-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes.

The following new feature was added:

  • NVDIMM memory error notification (ACPI 6.2)

The following security bugs were fixed:

  • CVE-2018-13406: An integer overflow in the uvesafb_setcmap function could have result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used (bnc#1100418)
  • CVE-2018-13053: The alarm_timer_nsleep function had an integer overflow via a large relative timeout because ktime_add_safe was not used (bnc#1099924)
  • CVE-2018-9385: Prevent overread of the 'driver_override' buffer (bsc#1100491)
  • CVE-2018-13405: The inode_init_owner function allowed local users to create files with an unintended group ownership allowing attackers to escalate privileges by making a plain file executable and SGID (bnc#1100416)
  • CVE-2017-5753: Systems with microprocessors utilizing speculative execution and branch prediction may have allowed unauthorized disclosure of information to an attacker with local user access via a side-channel analysis (bsc#1068032)
  • CVE-2018-1118: Linux kernel vhost did not properly initialize memory in messages passed between virtual guests and the host operating system. This could have allowed local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file (bsc#1092472)
  • CVE-2018-12233: A memory corruption bug in JFS could have been triggered by calling setxattr twice with two different extended attribute names on the same file. This vulnerability could be triggered by an unprivileged user with the ability to create files and execute programs (bsc#1097234)
  • CVE-2018-5848: In the function wmi_set_ie(), the length validation code did not handle unsigned integer overflow properly. As a result, a large value of the 'ie_len' argument could have caused a buffer overflow (bnc#1097356)
  • CVE-2018-1000204: Prevent infoleak caused by incorrect handling of the SG_IO ioctl (bsc#1096728)
  • CVE-2018-3639: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads the addresses of all prior memory writes are known may have allowed unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4 (bsc#1087082)
  • CVE-2018-1120: By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker could have caused utilities from psutils or procps (such as ps, w) to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks) (bsc#1093158)
  • CVE-2018-1094: The ext4_fill_super function did not always initialize the crc32c checksum driver, which allowed attackers to cause a denial of service (ext4_xattr_inode_hash NULL pointer dereference and system crash) via a crafted ext4 image (bsc#1087007)
  • CVE-2018-1092: The ext4_iget function mishandled the case of a root directory with a zero i_links_count, which allowed attackers to cause a denial of service (ext4_process_freed_data NULL pointer dereference and OOPS) via a crafted ext4 image (bsc#1087012)
  • 1093: The ext4_valid_block_bitmap function allowed attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image because balloc.c and ialloc.c do not validate bitmap block numbers (bsc#1087095)
  • CVE-2018-1000200: Prevent NULL pointer dereference which could have resulted in an out of memory (OOM) killing of large mlocked processes (bsc#1090150)
  • CVE-2018-1130: NULL pointer dereference in dccp_write_xmit() function that allowed a local user to cause a denial of service by a number of certain crafted system calls (bsc#1092904)
  • CVE-2018-5803: Prevent error in the '_sctp_make_chunk()' function when handling SCTP packets…
Record
SUSE-SU-2018:2092-1
Updated
2026-11-02
OSVSUSE-SU-2018:2150-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 RT kernel was updated to 4.4.139 to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2018-13053: The alarm_timer_nsleep function had an integer overflow via a large relative timeout because ktime_add_safe was not used (bnc#1099924)
  • CVE-2018-9385: Prevent overread of the 'driver_override' buffer (bsc#1100491)
  • CVE-2018-13405: The inode_init_owner function allowed local users to create files with an unintended group ownership allowing attackers to escalate privileges by making a plain file executable and SGID (bnc#1100416)
  • CVE-2018-13406: An integer overflow in the uvesafb_setcmap function could have result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used (bnc#1100418)
  • CVE-2017-5753: Systems with microprocessors utilizing speculative execution and branch prediction may have allowed unauthorized disclosure of information to an attacker with local user access via a side-channel analysis (bsc#1068032)

The following non-security bugs were fixed:

  • 1wire: family module autoload fails because of upper/lower case mismatch (bnc#1012382).
  • ALSA: hda - Clean up ALC299 init code (bsc#1099810).
  • ALSA: hda - Enable power_save_node for CX20722 (bsc#1099810).
  • ALSA: hda - Fix a wrong FIXUP for alc289 on Dell machines (bsc#1099810).
  • ALSA: hda - Fix incorrect usage of IS_REACHABLE() (bsc#1099810).
  • ALSA: hda - Fix pincfg at resume on Lenovo T470 dock (bsc#1099810).
  • ALSA: hda - Handle kzalloc() failure in snd_hda_attach_pcm_stream() (bnc#1012382).
  • ALSA: hda - Use acpi_dev_present() (bsc#1099810).
  • ALSA: hda - add a new condition to check if it is thinkpad (bsc#1099810).
  • ALSA: hda - silence uninitialized variable warning in activate_amp_in() (bsc#1099810).
  • ALSA: hda/patch_sigmatel: Add AmigaOne X1000 pinconfigs (bsc#1099810).
  • ALSA: hda/realtek - Add a quirk for FSC ESPRIMO U9210 (bsc#1099810).
  • ALSA: hda/realtek - Add headset mode support for Dell laptop (bsc#1099810).
  • ALSA: hda/realtek - Add support headset mode for DELL WYSE (bsc#1099810).
  • ALSA: hda/realtek - Clevo P950ER ALC1220 Fixup (bsc#1099810).
  • ALSA: hda/realtek - Enable Thinkpad Dock device for ALC298 platform (bsc#1099810).
  • ALSA: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (bsc#1099810).
  • ALSA: hda/realtek - Fix Dell headset Mic can't record (bsc#1099810).
  • ALSA: hda/realtek - Fix pop noise on Lenovo P50 and co (bsc#1099810).
  • ALSA: hda/realtek - Fix the problem of two front mics on more machines (bsc#1099810).
  • ALSA: hda/realtek - Fixup for HP x360 laptops with B and O speakers (bsc#1099810).
  • ALSA: hda/realtek - Fixup mute led on HP Spectre x360 (bsc#1099810).
  • ALSA: hda/realtek - Make dock sound work on ThinkPad L570 (bsc#1099810).
  • ALSA: hda/realtek - Refactor alc269_fixup_hp_mute_led_mic*() (bsc#1099810).
  • ALSA: hda/realtek - Reorder ALC269 ASUS quirk entries (bsc#1099810).
  • ALSA: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (bsc#1099810).
  • ALSA: hda/realtek - Update ALC255 depop optimize (bsc#1099810).
  • ALSA: hda/realtek - adjust the location of one mic (bsc#1099810).
  • ALSA: hda/realtek - change the location for one of two front mics (bsc#1099810).
  • ALSA: hda/realtek - set PINCFG_HEADSET_MIC to parse_flags (bsc#1099810).
  • ALSA: hda/realtek - update ALC215 depop optimize (bsc#1099810).
  • ALSA: hda/realtek - update ALC225 depop optimize (bsc#1099810).
  • ALSA: hda/realtek: Fix mic and headset jack sense on Asus X705UD (bsc#1099810).
  • ALSA: hda/realtek: Limit mic boost on T480 (bsc#1099810).
  • ALSA: hda: Fix forget to free resource in error handling code path in hda_codec_driver_probe (bsc#1099810).
  • ALSA: hda: add dock and led support for HP EliteBook 830 G5 (bsc#1099810).
  • ALSA: hda: add dock and led support for HP ProBook 640 G4 (bsc#1099810).
  • ALSA: hda: fix some klockwork scan warnings (bsc#1099810).
  • ARM: 8764/1: kgdb: fix NUMREGBYTES so that…
Record
SUSE-SU-2018:2150-1
Updated
2026-11-02
OSVSUSE-SU-2018:2222-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel-azure was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2018-5390 aka 'SegmentSmack': A remote attacker even with relatively low bandwidth could have caused lots of CPU usage by triggering the worst case scenario during IP and/or TCP fragment reassembly (bsc#1102340)
  • CVE-2017-18344: The timer_create syscall implementation didn't properly validate input, which could have lead to out-of-bounds access. This allowed userspace applications to read arbitrary kernel memory in some setups. (bsc#1102851)
  • CVE-2018-13406: An integer overflow in the uvesafb_setcmap function could have result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used (bnc#1100418)
  • CVE-2018-13053: The alarm_timer_nsleep function had an integer overflow via a large relative timeout because ktime_add_safe was not used (bnc#1099924)
  • CVE-2018-13405: The inode_init_owner function allowed local users to create files with an unintended group ownership allowing attackers to escalate privileges by making a plain file executable and SGID (bnc#1100416)
  • CVE-2017-5753: Systems with microprocessors utilizing speculative execution and branch prediction may have allowed unauthorized disclosure of information to an attacker with local user access via a side-channel analysis (bsc#1068032)
  • CVE-2018-1118: Linux kernel vhost did not properly initialize memory in messages passed between virtual guests and the host operating system. This could have allowed local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file (bsc#1092472)

The following non-security bugs were fixed:

  • 1wire: family module autoload fails because of upper/lower case mismatch (bsc#1051510)
  • 8139too: Use disable_irq_nosync() in rtl8139_poll_controller() (networking-stable-18_05_15)
  • acpi / LPSS: Add missing prv_offset setting for byt/cht PWM devices (bsc#1051510)
  • acpi / processor: Finish making acpi_processor_ppc_has_changed() void (bsc#1051510)
  • acpi / watchdog: properly initialize resources (bsc#1051510)
  • acpi, APEI, EINJ: Subtract any matching Register Region from Trigger resources (bsc#1051510)
  • acpi, nfit: Fix scrub idle detection (bsc#1094119)
  • acpi/nfit: fix cmd_rc for acpi_nfit_ctl to always return a value (bsc#1051510)
  • acpi: Add helper for deactivating memory region (bsc#1100132)
  • ahci: Disable LPM on Lenovo 50 series laptops with a too old BIOS (bsc#1051510)
  • alsa: hda - Handle pm failure during hotplug (bsc#1051510)
  • alsa: hda/ca0132 - use ARRAY_SIZE (bsc#1051510)
  • alsa: hda/ca0132: Delete pointless assignments to struct auto_pin_cfg fields (bsc#1051510)
  • alsa: hda/ca0132: Delete redundant UNSOL event requests (bsc#1051510)
  • alsa: hda/ca0132: Do not test for QUIRK_NONE (bsc#1051510)
  • alsa: hda/ca0132: Fix DMic data rate for Alienware M17x R4 (bsc#1051510)
  • alsa: hda/ca0132: Restore PCM Analog Mic-In2 (bsc#1051510)
  • alsa: hda/ca0132: Restore behavior of QUIRK_ALIENWARE (bsc#1051510)
  • alsa: hda/ca0132: make array ca0132_alt_chmaps static (bsc#1051510)
  • alsa: hda/realtek - Add Panasonic CF-SZ6 headset jack quirk (bsc#1051510)
  • alsa: hda/realtek - Add a quirk for FSC ESPRIMO U9210 (bsc#1051510)
  • alsa: hda/realtek - Fix pop noise on Lenovo P50 and co (bsc#1051510)
  • alsa: hda/realtek - Fix the problem of two front mics on more machines (bsc#1051510)
  • alsa: hda/realtek - Yet another Clevo P950 quirk entry (bsc#1101143)
  • alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (bsc#1051510)
  • alsa: hda: add mute led support for HP ProBook 455 G5 (bsc#1051510)
  • alsa: rawmidi: Change resized buffers atomically (bsc#1051510)
  • alsa: seq: Fix UBSAN warning at SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT ioctl (bsc#1051510)
  • alsa: timer: Fix UBSAN warning at SNDRV_TIMER_IOCTL_NEXT_DEVICE ioctl (bsc#1051510)
  • alx: take rtnl before calling __alx_open…
Record
SUSE-SU-2018:2222-1
Updated
2026-11-02
OSVSUSE-SU-2018:2344-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2018-3620: Local attackers on baremetal systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data. (bnc#1087081).
  • CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data, even from other virtual machines or the host system. (bnc#1089343).
  • CVE-2018-5390 aka 'SegmentSmack': The Linux Kernel can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service (bnc#1102340).
  • CVE-2018-5391 aka 'FragmentSmack': A flaw in the IP packet reassembly could be used by remote attackers to consume lots of CPU time (bnc#1103097).
  • CVE-2018-14734: drivers/infiniband/core/ucma.c allowed ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allowed attackers to cause a denial of service (use-after-free) (bnc#1103119).
  • CVE-2017-18344: The timer_create syscall implementation in kernel/time/posix-timers.c didn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allowed userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE) (bnc#1102851 bnc#1103580).
  • CVE-2018-9385: When printing the 'driver_override' option from with-in the amba driver, a very long line could expose one additional uninitialized byte (bnc#1100491).
  • CVE-2018-13053: The alarm_timer_nsleep function in kernel/time/alarmtimer.c had an integer overflow via a large relative timeout because ktime_add_safe is not used (bnc#1099924).
  • CVE-2018-13405: The inode_init_owner function in fs/inode.c allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416).
  • CVE-2018-13406: An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c could result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used (bnc#1098016 1100418).
  • CVE-2018-5814: Multiple race condition errors when handling probe, disconnect, and rebind operations could be exploited to trigger a use-after-free condition or a NULL pointer dereference by sending multiple USB over IP packets (bnc#1096480).

The following non-security bugs were fixed:

  • Add support for 5,25,50, and 100G to 802.3ad bonding driver (bsc#1096978)
  • bcache: add backing_request_endio() for bi_end_io (bsc#1064232).
  • bcache: add CACHE_SET_IO_DISABLE to struct cache_set flags (bsc#1064232).
  • bcache: add io_disable to struct cached_dev (bsc#1064232).
  • bcache: add journal statistic (bsc#1076110).
  • bcache: Add __printf annotation to __bch_check_keys() (bsc#1064232).
  • bcache: add stop_when_cache_set_failed option to backing device (bsc#1064232).
  • bcache: add wait_for_kthread_stop() in bch_allocator_thread() (bsc#1064232).
  • bcache: Annotate switch fall-through (bsc#1064232).
  • bcache: closures: move control bits one bit right (bsc#1076110).
  • bcache: correct flash only vols (check all uuids) (bsc#1064232). -…
Record
SUSE-SU-2018:2344-1
Updated
2026-11-02
OSVSUSE-SU-2018:2344-2 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2018-3620: Local attackers on baremetal systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data. (bnc#1087081).
  • CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data, even from other virtual machines or the host system. (bnc#1089343).
  • CVE-2018-5390 aka 'SegmentSmack': The Linux Kernel can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service (bnc#1102340).
  • CVE-2018-5391 aka 'FragmentSmack': A flaw in the IP packet reassembly could be used by remote attackers to consume lots of CPU time (bnc#1103097).
  • CVE-2018-14734: drivers/infiniband/core/ucma.c allowed ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allowed attackers to cause a denial of service (use-after-free) (bnc#1103119).
  • CVE-2017-18344: The timer_create syscall implementation in kernel/time/posix-timers.c didn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allowed userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE) (bnc#1102851 bnc#1103580).
  • CVE-2018-9385: When printing the 'driver_override' option from with-in the amba driver, a very long line could expose one additional uninitialized byte (bnc#1100491).
  • CVE-2018-13053: The alarm_timer_nsleep function in kernel/time/alarmtimer.c had an integer overflow via a large relative timeout because ktime_add_safe is not used (bnc#1099924).
  • CVE-2018-13405: The inode_init_owner function in fs/inode.c allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416).
  • CVE-2018-13406: An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c could result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used (bnc#1098016 1100418).
  • CVE-2018-5814: Multiple race condition errors when handling probe, disconnect, and rebind operations could be exploited to trigger a use-after-free condition or a NULL pointer dereference by sending multiple USB over IP packets (bnc#1096480).

The following non-security bugs were fixed:

  • Add support for 5,25,50, and 100G to 802.3ad bonding driver (bsc#1096978)
  • bcache: add backing_request_endio() for bi_end_io (bsc#1064232).
  • bcache: add CACHE_SET_IO_DISABLE to struct cache_set flags (bsc#1064232).
  • bcache: add io_disable to struct cached_dev (bsc#1064232).
  • bcache: add journal statistic (bsc#1076110).
  • bcache: Add __printf annotation to __bch_check_keys() (bsc#1064232).
  • bcache: add stop_when_cache_set_failed option to backing device (bsc#1064232).
  • bcache: add wait_for_kthread_stop() in bch_allocator_thread() (bsc#1064232).
  • bcache: Annotate switch fall-through (bsc#1064232).
  • bcache: closures: move control bits one bit right (bsc#1076110).
  • bcache: correct flash only vols (check all uuids) (bsc#1064232). -…
Record
SUSE-SU-2018:2344-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 4.16.12-1
4.16.12-1
linux
Debian:13
 before 4.16.12-1
4.16.12-1
linux
Debian:14
 before 4.16.12-1
4.16.12-1
kernel-default
SUSE:Linux Enterprise Desktop 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
kernel-source
SUSE:Linux Enterprise Desktop 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
kernel-syms
SUSE:Linux Enterprise Desktop 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
kgraft-patch-SLE12-SP3_Update_15
SUSE:Linux Enterprise Live Patching 12 SP3
 before 1-4.3.1
1-4.3.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
Show 79 moreShow less
Affected packages
PackageAffectedFixed
kernel-default
SUSE:Linux Enterprise Server 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
kernel-source
SUSE:Linux Enterprise Server 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP3
 before 4.4.140-94.42.1
4.4.140-94.42.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15
 before 4.12.14-25.3.1
4.12.14-25.3.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15
 before 4.12.14-25.3.1
4.12.14-25.3.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15
 before 4.12.14-25.3.1
4.12.14-25.3.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15
 before 4.12.14-25.3.1
4.12.14-25.3.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15
 before 4.12.14-25.3.1
4.12.14-25.3.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15
 before 4.12.14-25.3.1
4.12.14-25.3.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15
 before 4.12.14-25.3.1
4.12.14-25.3.1
kernel-vanilla
SUSE:Linux Enterprise Module for Development Tools 15
 before 4.12.14-25.3.1
4.12.14-25.3.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15
 before 4.12.14-25.3.1
4.12.14-25.3.1
kernel-default
SUSE:Linux Enterprise Live Patching 15
 before 4.12.14-25.3.1
4.12.14-25.3.1
kernel-livepatch-SLE15_Update_1
SUSE:Linux Enterprise Live Patching 15
 before 1-1.3.1
1-1.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15
 before 4.12.14-25.3.1
4.12.14-25.3.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15
 before 4.12.14-25.3.1
4.12.14-25.3.1
kernel-rt
SUSE:Linux Enterprise Real Time 12 SP3
 before 4.4.139-3.17.1
4.4.139-3.17.1
kernel-rt_debug
SUSE:Linux Enterprise Real Time 12 SP3
 before 4.4.139-3.17.1
4.4.139-3.17.1
kernel-source-rt
SUSE:Linux Enterprise Real Time 12 SP3
 before 4.4.139-3.17.1
4.4.139-3.17.1
kernel-syms-rt
SUSE:Linux Enterprise Real Time 12 SP3
 before 4.4.139-3.17.1
4.4.139-3.17.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15
 before 4.12.14-5.8.1
4.12.14-5.8.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15
 before 4.12.14-5.8.1
4.12.14-5.8.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15
 before 4.12.14-5.8.1
4.12.14-5.8.1
kernel-default
SUSE:OpenStack Cloud 7
 before 4.4.121-92.92.1
4.4.121-92.92.1
kernel-source
SUSE:OpenStack Cloud 7
 before 4.4.121-92.92.1
4.4.121-92.92.1
kernel-syms
SUSE:OpenStack Cloud 7
 before 4.4.121-92.92.1
4.4.121-92.92.1
kgraft-patch-SLE12-SP2_Update_24
SUSE:OpenStack Cloud 7
 before 1-3.7.1
1-3.7.1
lttng-modules
SUSE:OpenStack Cloud 7
 before 2.7.1-9.4.1
2.7.1-9.4.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP2
 before 4.4.121-92.92.1
4.4.121-92.92.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 4.4.121-92.92.1
4.4.121-92.92.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 4.4.121-92.92.1
4.4.121-92.92.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 4.4.121-92.92.1
4.4.121-92.92.1
kgraft-patch-SLE12-SP2_Update_24
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1-3.7.1
1-3.7.1
lttng-modules
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 2.7.1-9.4.1
2.7.1-9.4.1
kernel-default
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 4.4.121-92.92.1
4.4.121-92.92.1
kernel-source
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 4.4.121-92.92.1
4.4.121-92.92.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 4.4.121-92.92.1
4.4.121-92.92.1
kgraft-patch-SLE12-SP2_Update_24
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 1-3.7.1
1-3.7.1
lttng-modules
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 2.7.1-9.4.1
2.7.1-9.4.1
kernel-default
SUSE:Enterprise Storage 4
 before 4.4.121-92.92.1
4.4.121-92.92.1
kernel-source
SUSE:Enterprise Storage 4
 before 4.4.121-92.92.1
4.4.121-92.92.1
kernel-syms
SUSE:Enterprise Storage 4
 before 4.4.121-92.92.1
4.4.121-92.92.1
kgraft-patch-SLE12-SP2_Update_24
SUSE:Enterprise Storage 4
 before 1-3.7.1
1-3.7.1
lttng-modules
SUSE:Enterprise Storage 4
 before 2.7.1-9.4.1
2.7.1-9.4.1
kernel-default
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 4.4.121-92.92.1
4.4.121-92.92.1
kernel-source
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 4.4.121-92.92.1
4.4.121-92.92.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 4.4.121-92.92.1
4.4.121-92.92.1
kgraft-patch-SLE12-SP2_Update_24
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1-3.7.1
1-3.7.1
lttng-modules
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 2.7.1-9.4.1
2.7.1-9.4.1
linux-aws
Ubuntu:14.04:LTS
 before 4.4.0-1023.23, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 8 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.22
4.4.0-1023.23
linux-lts-xenial
Ubuntu:14.04:LTS
 before 4.4.0-128.154~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
4.4.0-128.154~14.04.1
linux
Ubuntu:16.04:LTS
 before 4.4.0-128.154, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-128.154
linux-aws
Ubuntu:16.04:LTS
 before 4.4.0-1061.70, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 29 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.69
4.4.0-1061.70
linux-azure
Ubuntu:16.04:LTS
 before 4.15.0-1022.22~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 15 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.1
4.15.0-1022.22~16.04.1
linux-gcp
Ubuntu:16.04:LTS
 before 4.15.0-1018.19~16.04.2, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 13 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.1
4.15.0-1018.19~16.04.2
linux-hwe
Ubuntu:16.04:LTS
 before 4.15.0-33.36~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 33 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.1
4.15.0-33.36~16.04.1
linux-kvm
Ubuntu:16.04:LTS
 before 4.4.0-1027.32, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 9 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.31
4.4.0-1027.32
linux-raspi2
Ubuntu:16.04:LTS
 before 4.4.0-1091.99, plus listed versions
4.2.0-1013.194.2.0-1014.214.3.0-1006.64.4.0-1003.44.4.0-1004.5
Show 43 moreShow less
4.4.0-1009.104.4.0-1010.124.4.0-1010.134.4.0-1012.164.4.0-1016.224.4.0-1017.234.4.0-1019.254.4.0-1021.274.4.0-1023.294.4.0-1027.334.4.0-1029.364.4.0-1034.414.4.0-1038.454.4.0-1040.474.4.0-1042.494.4.0-1044.514.4.0-1046.534.4.0-1048.554.4.0-1050.574.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1055.624.4.0-1057.644.4.0-1059.674.4.0-1061.694.4.0-1065.734.4.0-1067.754.4.0-1069.774.4.0-1070.784.4.0-1071.794.4.0-1074.824.4.0-1075.834.4.0-1076.844.4.0-1077.854.4.0-1079.874.4.0-1080.884.4.0-1082.904.4.0-1085.934.4.0-1086.944.4.0-1087.954.4.0-1089.974.4.0-1090.98
4.4.0-1091.99
linux-snapdragon
Ubuntu:16.04:LTS
 before 4.4.0-1094.99, plus listed versions
4.4.0-1012.124.4.0-1013.144.4.0-1013.154.4.0-1015.184.4.0-1019.22
Show 40 moreShow less
4.4.0-1020.234.4.0-1022.254.4.0-1024.274.4.0-1026.294.4.0-1030.334.4.0-1032.364.4.0-1035.394.4.0-1039.434.4.0-1042.464.4.0-1044.484.4.0-1046.504.4.0-1047.514.4.0-1048.524.4.0-1050.544.4.0-1051.554.4.0-1053.574.4.0-1054.584.4.0-1055.594.4.0-1057.614.4.0-1058.624.4.0-1059.634.4.0-1061.664.4.0-1063.684.4.0-1067.724.4.0-1069.744.4.0-1071.764.4.0-1072.774.4.0-1073.784.4.0-1076.814.4.0-1077.824.4.0-1078.834.4.0-1079.844.4.0-1081.864.4.0-1082.874.4.0-1084.894.4.0-1087.924.4.0-1088.934.4.0-1090.954.4.0-1092.974.4.0-1093.98
4.4.0-1094.99
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 before 4.4.0-1008.10, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.6
4.4.0-1008.10
linux
Ubuntu:18.04:LTS
 before 4.15.0-33.36, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 11 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.35
4.15.0-33.36
linux-aws
Ubuntu:18.04:LTS
 before 4.15.0-1020.20, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 6 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.19
4.15.0-1020.20
linux-azure
Ubuntu:18.04:LTS
 before 4.15.0-1022.23, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 6 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.21
4.15.0-1022.23
linux-gcp
Ubuntu:18.04:LTS
 before 4.15.0-1018.19, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 5 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.18
4.15.0-1018.19
linux-kvm
Ubuntu:18.04:LTS
 before 4.15.0-1020.20, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 6 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.19
4.15.0-1020.20
linux-oem
Ubuntu:18.04:LTS
 before 4.15.0-1017.20, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.124.15.0-1012.154.15.0-1013.164.15.0-1015.18
4.15.0-1017.20
linux-raspi2
Ubuntu:18.04:LTS
 before 4.15.0-1021.23, plus listed versions
4.13.0-1005.54.13.0-1006.64.13.0-1008.84.15.0-1006.74.15.0-1009.10
Show 7 moreShow less
4.15.0-1010.114.15.0-1011.124.15.0-1012.134.15.0-1013.144.15.0-1017.184.15.0-1018.194.15.0-1020.22
4.15.0-1021.23
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-9385 is a high vulnerability (CVSS 7.8) in Google Android, published July 24, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 17th percentile. Fixed in linux 4.16.12-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 29 versions, 200 references and the rest of 6 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open