suse · CVE-2018-7566

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2018-7566 severity moderate: SUSE including 259 source package names (cluster-md-kmp-default-4.12.14-120.1, dlm-kmp-default-4.12.14-120.1, …), 473 product×package rows across 69 product lines (SUSE CaaS Platform 4.5, SUSE Enterprise Storage 7, … (69 product lines)): Fixed 368, Known Not Affected 105.

Description:

The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.