Lucene search

K
redhatcveRedhat.comRH:CVE-2018-1000204
HistoryJun 11, 2018 - 8:19 a.m.

CVE-2018-1000204

2018-06-1108:19:19
redhat.com
access.redhat.com
22

0.002 Low

EPSS

Percentile

51.7%

A malformed SG_IO ioctl issued for a SCSI device in the Linux kernel leads to a local kernel data leak manifesting in up to approximately 1000 memory pages copied to the userspace. The problem has limited scope as non-privileged users usually have no permissions to access SCSI device files.