PT-2018-17123

CVE-2018-5750

·

Published

2018-01-26

·

Updated

2019-03-07

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.16
Description: The issue allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call. This is due to a problem in the acpi smbus hc add function in drivers/acpi/sbshc.c.
Recommendations: For Linux kernel versions prior to 4.14.16, update to version 4.14.16 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2018-5750
ALT-PU-2018-1111
ALT-PU-2018-1991
CESA-2018_1062
DLA-1369-1
DSA-4120-1
DSA-4120-2
DSA-4187-1
RHSA-2018:0676
RHSA-2018_0676
RHSA-2018:1062
RHSA-2018_1062
RHSA-2018:2948
USN-3631-1
USN-3631-2
USN-3697-1
USN-3697-2
USN-3698-1
USN-3698-2
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com