Every CVE Search/ Get API key

CVE-2018-1091

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before...

5.5 MediumFix available

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.40%Down 1.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

Record
CVE-2018-1091
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-391, CWE-119
Updated
2026-11-02
CVE List No score

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

Record
CVE-2018-1091
Weakness
CWE-391
Updated
2026-11-02
EUVDEUVD-2018-11741 No score

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

Record
EUVD-2018-11741
Updated
2026-11-03
GitHub AdvisoriesGHSA-8x9x-6w2w-w9h8 5.5

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before...

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

Record
GHSA-8x9x-6w2w-w9h8
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-119
Updated
2026-11-02
OSV 5.5

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

Record
CVE-2018-1091
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-1091 5.5

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

Record
DEBIAN-CVE-2018-1091
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVRHSA-2018:1318 8.1

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2018:1318
CVSS 3.0
8.1 HighCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-1091 5.5

In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.

Record
UBUNTU-CVE-2018-1091
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVSUSE-SU-2018:1048-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.126 to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2018-1091: In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service (bnc#1087231).
  • CVE-2018-7740: The resv_map_release function in mm/hugetlb.c allowed local users to cause a denial of service (BUG) via a crafted application that made mmap system calls and has a large pgoff argument to the remap_file_pages system call (bnc#1084353).
  • CVE-2018-8043: The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c did not validate certain resource availability, which allowed local users to cause a denial of service (NULL pointer dereference) (bnc#1084829).
  • CVE-2017-18257: The __get_data_block function in fs/f2fs/data.c allowed local users to cause a denial of service (integer overflow and loop) via crafted use of the open and fallocate system calls with an FS_IOC_FIEMAP ioctl. (bnc#1088241)
  • CVE-2018-8822: Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c could be exploited by malicious NCPFS servers to crash the kernel or execute code (bnc#1086162).

The following non-security bugs were fixed:

  • acpica: Add header support for TPM2 table changes (bsc#1084452).
  • acpica: Add support for new SRAT subtable (bsc#1085981).
  • acpica: iasl: Update to IORT SMMUv3 disassembling (bsc#1085981).
  • acpi/iort: numa: Add numa node mapping for smmuv3 devices (bsc#1085981).
  • acpi, numa: fix pxm to online numa node associations (bnc#1012382).
  • acpi / pmic: xpower: Fix power_table addresses (bnc#1012382).
  • acpi/processor: Fix error handling in __acpi_processor_start() (bnc#1012382).
  • acpi/processor: Replace racy task affinity logic (bnc#1012382).
  • add mainline tag to various patches to be able to get further work done
  • af_iucv: enable control sends in case of SEND_SHUTDOWN (bnc#1085507, LTC#165135).
  • agp/intel: Flush all chipset writes after updating the GGTT (bnc#1012382).
  • ahci: Add PCI-id for the Highpoint Rocketraid 644L card (bnc#1012382).
  • alsa: aloop: Fix access to not-yet-ready substream via cable (bnc#1012382).
  • alsa: aloop: Sync stale timer before release (bnc#1012382).
  • alsa: firewire-digi00x: handle all MIDI messages on streaming packets (bnc#1012382).
  • alsa: hda: Add a power_save blacklist (bnc#1012382).
  • alsa: hda: add dock and led support for HP EliteBook 820 G3 (bnc#1012382).
  • alsa: hda: add dock and led support for HP ProBook 640 G2 (bnc#1012382).
  • alsa: hda/realtek - Always immediately update mute LED with pin VREF (bnc#1012382).
  • alsa: hda/realtek - Fix dock line-out volume on Dell Precision 7520 (bnc#1012382).
  • alsa: hda/realtek - Fix speaker no sound after system resume (bsc#1031717).
  • alsa: hda - Revert power_save option default value (git-fixes).
  • alsa: pcm: Fix UAF in snd_pcm_oss_get_formats() (bnc#1012382).
  • alsa: usb-audio: Add a quirck for B&W PX headphones (bnc#1012382).
  • alsa: usb-audio: Fix parsing descriptor of UAC2 processing unit (bnc#1012382).
  • apparmor: Make path_max parameter readonly (bnc#1012382).
  • arm64: Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (bsc#1068032).
  • arm64: Add missing Falkor part number for branch predictor hardening (bsc#1068032).
  • arm64: capabilities: Handle duplicate entries for a capability (bsc#1068032).
  • arm64: cpufeature: __this_cpu_has_cap() shouldn't stop early (bsc#1068032).
  • arm64 / cpuidle: Use new cpuidle macro for entering retention state (bsc#1084328).
  • arm64: Enforce BBM for huge IO/VMAP mappings (bsc#1088313).
  • arm64: fix smccc compilation (bsc#1068032).
  • arm64: Kill PSCI_GET_VERSION as a variant-2 workaround (bsc#1068032).
  • arm64: KVM: Add SMCCC_ARCH_WORKAROUND_1…
Record
SUSE-SU-2018:1048-1
Updated
2026-11-02
OSVSUSE-SU-2018:1217-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 RT kernel was updated to 4.4.128 to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2018-10124: The kill_something_info function in kernel/signal.c might have allowed local users to cause a denial of service via an INT_MIN argument (bnc#1089752).
  • CVE-2018-10087: The kernel_wait4 function in kernel/exit.c might have allowed local users to cause a denial of service by triggering an attempted use of the -INT_MIN value (bnc#1089608).
  • CVE-2017-18257: The __get_data_block function in fs/f2fs/data.c allowed local users to cause a denial of service (integer overflow and loop) via crafted use of the open and fallocate system calls with an FS_IOC_FIEMAP ioctl (bnc#1088241)
  • CVE-2018-1091: In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service (bnc#1087231).
  • CVE-2018-8822: Incorrect buffer length handling in the ncp_read_kernel function could have been exploited by malicious NCPFS servers to crash the kernel or execute code (bnc#1086162).
  • CVE-2018-8043: The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c did not validate certain resource availability, which allowed local users to cause a denial of service (NULL pointer dereference) (bnc#1084829).
  • CVE-2018-7740: The resv_map_release function in mm/hugetlb.c allowed local users to cause a denial of service (BUG) via a crafted application that made mmap system calls and has a large pgoff argument to the remap_file_pages system call (bnc#1084353).

The following non-security bugs were fixed:

  • Fix ltp might_sleep() splat BUG
  • ACPI / PMIC: xpower: Fix power_table addresses (bnc#1012382).
  • ACPI, PCI, irq: remove redundant check for null string pointer (bnc#1012382).
  • ACPI/IORT: numa: Add numa node mapping for smmuv3 devices (bsc#1085981).
  • ACPI/processor: Fix error handling in __acpi_processor_start() (bnc#1012382).
  • ACPI/processor: Replace racy task affinity logic (bnc#1012382).
  • ACPICA: Add header support for TPM2 table changes (bsc#1084452).
  • ACPICA: Add support for new SRAT subtable (bsc#1085981).
  • ACPICA: Disassembler: Abort on an invalid/unknown AML opcode (bnc#1012382).
  • ACPICA: Events: Add runtime stub support for event APIs (bnc#1012382).
  • ACPICA: iasl: Update to IORT SMMUv3 disassembling (bsc#1085981).
  • ALSA: aloop: Fix access to not-yet-ready substream via cable (bnc#1012382).
  • ALSA: aloop: Sync stale timer before release (bnc#1012382).
  • ALSA: firewire-digi00x: handle all MIDI messages on streaming packets (bnc#1012382).
  • ALSA: hda - Revert power_save option default value (git-fixes).
  • ALSA: hda/realtek - Always immediately update mute LED with pin VREF (bnc#1012382).
  • ALSA: hda/realtek - Fix dock line-out volume on Dell Precision 7520 (bnc#1012382).
  • ALSA: hda/realtek - Fix speaker no sound after system resume (bsc#1031717).
  • ALSA: hda: Add a power_save blacklist (bnc#1012382).
  • ALSA: hda: add dock and led support for HP EliteBook 820 G3 (bnc#1012382).
  • ALSA: hda: add dock and led support for HP ProBook 640 G2 (bnc#1012382).
  • ALSA: pcm: Fix UAF in snd_pcm_oss_get_formats() (bnc#1012382).
  • ALSA: pcm: Use dma_bytes as size parameter in dma_mmap_coherent() (bnc#1012382).
  • ALSA: pcm: potential uninitialized return values (bnc#1012382).
  • ALSA: usb-audio: Add a quirck for BW PX headphones (bnc#1012382).
  • ALSA: usb-audio: Fix parsing descriptor of UAC2 processing unit (bnc#1012382).
  • ARM64 / cpuidle: Use new cpuidle macro for entering retention state (bsc#1084328).
  • ARM: 8668/1: ftrace: Fix dynamic ftrace with DEBUG_RODATA and !FRAME_POINTER (bnc#1012382).
  • ARM: DRA7: clockdomain: Change the CLKTRCTRL of CM_PCIE_CLKSTCTRL to SW_WKUP (bnc#1012382). -…
Record
SUSE-SU-2018:1217-1
Updated
2026-11-02
OSVSUSE-SU-2019:1287-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes.

Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)

  • CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
  • CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
  • CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS)
  • CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

This kernel update contains software mitigations for these issues, which also utilize CPU microcode updates shipped in parallel.

For more information on this set of information leaks, check out https://www.suse.com/support/kb/doc/?id=7023736

The following security bugs were fixed:

  • CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network could use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. (bnc#1096748).
  • CVE-2018-1129: A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. (bnc#1096748).
  • CVE-2016-8636: Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c allowed local users to cause a denial of service (memory corruption), obtain sensitive information or possibly have unspecified other impact via a write or read request involving the 'RDMA protocol over infiniband' (aka Soft RoCE) technology (bnc#1024908).
  • CVE-2017-18174: In the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function, leading to a double free (bnc#1080533).
  • CVE-2018-1091: In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service (bnc#1087231).
  • CVE-2018-1120: By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which made a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks) (bnc#1093158).
  • CVE-2019-11486: The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c has multiple race conditions (bnc#1133188).
  • CVE-2019-3882: A flaw was found in the vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS) (bsc#1131427).
  • CVE-2018-19407: The vcpu_scan_ioapic function in arch/x86/kvm/x86.c allowed local users to cause a denial of service (NULL pointer dereference and BUG) via crafted system calls that reach a situation where ioapic is uninitialized (bnc#1116841).
  • CVE-2017-17741: The KVM implementation allowed attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c and include/trace/events/kvm.h (bnc#1073311).
  • CVE-2019-9503, CVE-2019-8564: Multiple brcmfmac frame validation bypasses have been fixed (bnc#1132828, bnc#1132673).

The following non-security bugs were fixed:

  • ACPI: acpi_pad: Do not launch acpi_pad threads on idle cpus (bsc#1113399).
  • add mainline tags to four hyperv patches…
Record
SUSE-SU-2019:1287-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 4.13.10-1
4.13.10-1
linux
Debian:13
 before 4.13.10-1
4.13.10-1
linux
Debian:14
 before 4.13.10-1
4.13.10-1
kernel
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
Show 110 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-doc
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-headers
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
perf
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
perf-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
python-perf
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-doc
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-headers
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
perf
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
perf-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
python-perf
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-bootwrapper
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-doc
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-headers
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-kdump
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-kdump-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-kdump-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
perf
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
python-perf
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-doc
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-headers
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
perf
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
perf-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
python-perf
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:3.10.0-862.2.3.el7
0:3.10.0-862.2.3.el7
kernel-default
SUSE:Linux Enterprise Desktop 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.1
4.4.126-94.22.1
kernel-source
SUSE:Linux Enterprise Desktop 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.2
4.4.126-94.22.2
kernel-syms
SUSE:Linux Enterprise Desktop 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.1
4.4.126-94.22.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.1
4.4.126-94.22.1
kgraft-patch-SLE12-SP3_Update_11
SUSE:Linux Enterprise Live Patching 12 SP3
From an advisory covering 5 CVEs
 before 1-4.5.1
1-4.5.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.1
4.4.126-94.22.1
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.1
4.4.126-94.22.1
kernel-default
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.1
4.4.126-94.22.1
kernel-source
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.2
4.4.126-94.22.2
kernel-syms
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.1
4.4.126-94.22.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.1
4.4.126-94.22.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.2
4.4.126-94.22.2
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.1
4.4.126-94.22.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP3
From an advisory covering 5 CVEs
 before 4.4.126-94.22.1
4.4.126-94.22.1
kernel-rt
SUSE:Linux Enterprise Real Time 12 SP3
From an advisory covering 7 CVEs
 before 4.4.128-3.11.1
4.4.128-3.11.1
kernel-rt_debug
SUSE:Linux Enterprise Real Time 12 SP3
From an advisory covering 7 CVEs
 before 4.4.128-3.11.1
4.4.128-3.11.1
kernel-source-rt
SUSE:Linux Enterprise Real Time 12 SP3
From an advisory covering 7 CVEs
 before 4.4.128-3.11.1
4.4.128-3.11.1
kernel-syms-rt
SUSE:Linux Enterprise Real Time 12 SP3
From an advisory covering 7 CVEs
 before 4.4.128-3.11.1
4.4.128-3.11.1
kernel-default
SUSE:OpenStack Cloud 7
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kernel-source
SUSE:OpenStack Cloud 7
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kernel-syms
SUSE:OpenStack Cloud 7
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kgraft-patch-SLE12-SP2_Update_29
SUSE:OpenStack Cloud 7
From an advisory covering 16 CVEs
 before 1-3.5.2
1-3.5.2
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP2
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kgraft-patch-SLE12-SP2_Update_29
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 16 CVEs
 before 1-3.5.2
1-3.5.2
kernel-default
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kernel-source
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kernel-syms
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kgraft-patch-SLE12-SP2_Update_29
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 16 CVEs
 before 1-3.5.2
1-3.5.2
kernel-default
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kernel-source
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kernel-syms
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kernel-default
SUSE:Enterprise Storage 4
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kernel-source
SUSE:Enterprise Storage 4
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kernel-syms
SUSE:Enterprise Storage 4
From an advisory covering 16 CVEs
 before 4.4.121-92.109.2
4.4.121-92.109.2
kgraft-patch-SLE12-SP2_Update_29
SUSE:Enterprise Storage 4
From an advisory covering 16 CVEs
 before 1-3.5.2
1-3.5.2

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-1091 is a medium vulnerability (CVSS 5.5) in Linux Kernel, published March 27, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in linux 4.13.10-1.

References

Show 188 moreShow less
This page doesn't list everything

Left out here: the rest of 3 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open