Information Exposure The advisory has been revoked - it doesn't affect any version of package kernel-headers (opens in a new tab)

Threat Intelligence

0.56% (45^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL7-KERNELHEADERS-7969417
published14 Sept 2024
disclosed26 Apr 2018

Report a new vulnerability Found a mistake?

Introduced: 26 Apr 2018

CVE-2018-16658 (opens in a new tab) CWE-200 (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:7.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-headers package and not the kernel-headers package as distributed by RHEL.

An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940.