CVE-2018-5750

MEDIUM5.5

The acpi_smbus_hc_add function in drivers/acpi/sbshc

Published Jan 26, 2018

Modified 1 years ago

Details

The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call.

References

WEBhttp://www.securitytracker.com/id/1040319 ADVISORYhttps://access.redhat.com/errata/RHSA-2018:0676 ADVISORYhttps://access.redhat.com/errata/RHSA-2018:1062 ADVISORYhttps://access.redhat.com/errata/RHSA-2018:2948 WEBhttps://lists.debian.org/debian-lts-announce/2018/05/msg00000.html WEBhttps://patchwork.kernel.org/patch/10174835/ADVISORYhttps://usn.ubuntu.com/3631-1/ADVISORYhttps://usn.ubuntu.com/3631-2/ADVISORYhttps://usn.ubuntu.com/3697-1/ADVISORYhttps://usn.ubuntu.com/3697-2/ADVISORYhttps://usn.ubuntu.com/3698-1/ADVISORYhttps://usn.ubuntu.com/3698-2/ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2018-5750 ADVISORYhttps://www.debian.org/security/2018/dsa-4120 ADVISORYhttps://www.debian.org/security/2018/dsa-4187

CVSS Analysis

CVSS v3.0

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Ecosystems

Timeline

PublishedJan 26, 2018

ModifiedAug 5, 2024

CVE-2018-5750 | Mondoo Vulnerability Intelligence