CVE-2018-1068

MEDIUM

6.7

CVSS Score

Published: March 16, 2018 at 04:00 PM UTC

Updated: June 17, 2026 at 01:50 AM UTC

11 products affected across 5 vendorsLinux KernelDebian LinuxUbuntu Linux

Using Linux Kernel by Linux Kernel Organization, Inc.?

Get instant alerts when new vulnerabilities affect Linux Kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.7

Exploit prediction

EPSS 0.4%

Description

A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

12.04 14.04 16.04 17.10

Debian Linux · Debiandrupal

95%

7.0 8.0 9.0

Linux Kernel · Linux

95%

v < 3.2.1023.17 ≤ v < 3.18.1003.19 ≤ v < 4.1.513.3 ≤ v < 3.16.574.10 ≤ v < 4.14.274.15 ≤ v < 4.15.104.2 ≤ v < 4.4.1224.5 ≤ v < 4.9.88

Affected range stops below 3.16.57, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.18.100, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.2.102, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.1.51, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.14.27, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.15.10, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.4.122, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.88, so it looks safe — our inference, not a vendor statement

Enterprise Linux Desktop · Red Hatrubygems

95%

7.0

Enterprise Linux Server · Red Hatrubygems

95%

7.0

Enterprise Linux Server Aus · Red Hatrubygems

95%

7.6

Enterprise Linux Server Eus · Red Hatrubygems

95%

7.5 7.6

Enterprise Linux Server Tus · Red Hatrubygems

95%

7.6

Enterprise Linux Workstation · Red Hatrubygems

95%

7.0

Virtualization Host · Red Hat

95%

4.0

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references