USN-3848-1: linux Ubuntu

Published

Published 20-12-2018Last modified 22-04-2026

Vulnerability summary

USN-3848-1 is a vulnerability in linux Ubuntu with no CVSS score yet.

Priority

Insufficient evidence

No CVSS vector published; no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 4 · Downstream 0 · Related 4

CVE-2017-18174 CVE-2018-12896 CVE-2018-18690 CVE-2018-18710

Timeline

20-12-2018
PublishedVulnerability first disclosed.
22-04-2026
Last modifiedVulnerability information updated.

Description

linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities It was discovered that a double free existed in the AMD GPIO driver in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-18174) It was discovered that an integer overrun vulnerability existed in the POSIX timers implementation in the Linux kernel. A local attacker could use this to cause a denial of service. (CVE-2018-12896) Kanda Motohiro discovered that writing extended attributes to an XFS file system in the Linux kernel in certain situations could cause an error condition to occur. A local attacker could use this to cause a denial of service. (CVE-2018-18690) It was discovered that an integer overflow vulnerability existed in the CDROM driver of the Linux kernel. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-18710)