Early Access — Mondoo Vulnerability Intelligence is currently in preview.

UBUNTU-CVE-2018-5995

MEDIUM5.5

The pcpu_embed_first_chunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "pages/cpu" printk call.

Published Aug 7, 2018

Modified 7 months ago

Fix available

Details

The pcpu_embed_first_chunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "pages/cpu" printk call.

Affected Packages

Ubuntu:Pro:16.04:LTSlinux

Affected versions:

4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.114.3.0-5.164.3.0-6.174.3.0-7.184.4.0-10.254.4.0-101.124+127 more

Fixed in:

4.4.0-222.255

Ubuntu:Pro:14.04:LTSlinux

Affected versions:

3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.83.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.15+170 more

Ubuntu:20.04:LTSlinux

Affected versions:

5.3.0-18.195.3.0-24.26

Fixed in:

5.4.0-9.12

Ubuntu:18.04:LTSlinux

Affected versions:

4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.35

Fixed in:

4.15.0-10.11

Ubuntu:Pro:14.04:LTSlinux-aws

Affected versions:

4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.94.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.16+55 more

Fixed in:

4.4.0-1102.107

Ubuntu:20.04:LTSlinux-aws

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.11

Fixed in:

5.4.0-1005.5

Ubuntu:18.04:LTSlinux-aws

Fixed in:

4.15.0-1001.1

Ubuntu:Pro:16.04:LTSlinux-aws

Affected versions:

4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.184.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.26+82 more

Fixed in:

4.4.0-1138.152

Ubuntu:18.04:LTSlinux-aws-5.0

Fixed in:

5.0.0-1021.24~18.04.1

Ubuntu:18.04:LTSlinux-aws-5.3

Fixed in:

5.3.0-1016.17~18.04.1

Ubuntu:18.04:LTSlinux-aws-5.4

Fixed in:

5.4.0-1018.18~18.04.1

Ubuntu:16.04:LTSlinux-aws-hwe

Fixed in:

4.15.0-1030.31~16.04.1

Ubuntu:20.04:LTSlinux-azure

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.10

Fixed in:

5.4.0-1006.6

Ubuntu:16.04:LTSlinux-azure

Affected versions:

4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.154.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.12+5 more

Fixed in:

4.15.0-1013.13~16.04.2

Ubuntu:14.04:LTSlinux-azure

Fixed in:

4.15.0-1023.24~14.04.1

Ubuntu:18.04:LTSlinux-azure

Fixed in:

4.15.0-1002.2

Ubuntu:18.04:LTSlinux-azure-4.15

Fixed in:

4.15.0-1082.92

Ubuntu:18.04:LTSlinux-azure-5.3

Fixed in:

5.3.0-1007.8~18.04.1

Ubuntu:18.04:LTSlinux-azure-5.4

Fixed in:

5.4.0-1020.20~18.04.1

Ubuntu:18.04:LTSlinux-dell300x

Fixed in:

4.15.0-1005.8

Ubuntu:18.04:LTSlinux-gcp

Fixed in:

4.15.0-1001.1

Ubuntu:20.04:LTSlinux-gcp

Affected versions:

5.3.0-1004.45.3.0-1009.105.3.0-1011.12

Fixed in:

5.4.0-1005.5

Ubuntu:16.04:LTSlinux-gcp

Affected versions:

4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.94.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.15+5 more

Fixed in:

4.15.0-1014.14~16.04.1

Ubuntu:18.04:LTSlinux-gcp-4.15

Fixed in:

4.15.0-1071.81

Ubuntu:18.04:LTSlinux-gcp-5.3

Fixed in:

5.3.0-1008.9~18.04.1

Ubuntu:18.04:LTSlinux-gcp-5.4

Fixed in:

5.4.0-1019.19~18.04.2

Ubuntu:20.04:LTSlinux-gke

Fixed in:

5.4.0-1033.35

Ubuntu:18.04:LTSlinux-gke-4.15

Fixed in:

4.15.0-1030.32

Ubuntu:18.04:LTSlinux-gke-5.0

Fixed in:

5.0.0-1011.11~18.04.1

Ubuntu:18.04:LTSlinux-gke-5.3

Fixed in:

5.3.0-1011.12~18.04.1

Ubuntu:18.04:LTSlinux-gke-5.4

Fixed in:

5.4.0-1025.25~18.04.1

Ubuntu:20.04:LTSlinux-gkeop

Fixed in:

5.4.0-1008.9

Ubuntu:18.04:LTSlinux-gkeop-5.4

Fixed in:

5.4.0-1001.1

Ubuntu:16.04:LTSlinux-hwe

Affected versions:

4.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.1+24 more

Fixed in:

4.15.0-24.26~16.04.1

Ubuntu:18.04:LTSlinux-hwe

Fixed in:

4.18.0-13.14~18.04.1

Ubuntu:18.04:LTSlinux-hwe-5.4

Fixed in:

5.4.0-37.41~18.04.1

Ubuntu:20.04:LTSlinux-hwe-5.8

Fixed in:

5.8.0-23.24~20.04.1

Ubuntu:18.04:LTSlinux-hwe-edge

Fixed in:

5.0.0-15.16~18.04.1

Ubuntu:20.04:LTSlinux-kvm

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.10

Fixed in:

5.4.0-1004.4

Ubuntu:Pro:16.04:LTSlinux-kvm

Affected versions:

4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.154.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.24+61 more

Fixed in:

4.4.0-1103.112

Ubuntu:18.04:LTSlinux-kvm

Fixed in:

4.15.0-1002.2

Ubuntu:Pro:14.04:LTSlinux-lts-xenial

Affected versions:

4.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.14.4.0-121.145~14.04.1+98 more

Fixed in:

4.4.0-222.255~14.04.1

Ubuntu:18.04:LTSlinux-oem

Fixed in:

4.15.0-1002.3

Ubuntu:20.04:LTSlinux-oem-5.10

Fixed in:

5.10.0-1008.9

Ubuntu:20.04:LTSlinux-oem-5.6

Fixed in:

5.6.0-1007.7

Ubuntu:18.04:LTSlinux-oem-osp1

Fixed in:

5.0.0-1010.11

Ubuntu:20.04:LTSlinux-oracle

Affected versions:

5.3.0-1002.25.3.0-1007.85.3.0-1008.9

Fixed in:

5.4.0-1005.5

Ubuntu:16.04:LTSlinux-oracle

Fixed in:

4.15.0-1007.9~16.04.1

Ubuntu:18.04:LTSlinux-oracle

Fixed in:

4.15.0-1007.9

Ubuntu:18.04:LTSlinux-oracle-5.0

Fixed in:

5.0.0-1007.12~18.04.1

Ubuntu:18.04:LTSlinux-oracle-5.3

Fixed in:

5.3.0-1011.12~18.04.1

Ubuntu:18.04:LTSlinux-oracle-5.4

Fixed in:

5.4.0-1019.19~18.04.1

Ubuntu:20.04:LTSlinux-raspi

Fixed in:

5.4.0-1007.7

Ubuntu:18.04:LTSlinux-raspi-5.4

Fixed in:

5.4.0-1013.13~18.04.1

Ubuntu:18.04:LTSlinux-raspi2

Affected versions:

4.13.0-1005.54.13.0-1006.64.13.0-1008.8

Fixed in:

4.15.0-1006.7

Ubuntu:20.04:LTSlinux-raspi2

Affected versions:

5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.19

Fixed in:

5.4.0-1004.4

Ubuntu:Pro:20.04:LTSlinux-raspi2

Affected versions:

5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6

Ubuntu:18.04:LTSlinux-raspi2-5.3

Fixed in:

5.3.0-1017.19~18.04.1

Ubuntu:20.04:LTSlinux-riscv

Fixed in:

5.4.0-24.28

Ubuntu:18.04:LTSlinux-snapdragon

Affected versions:

4.4.0-1077.824.4.0-1078.834.4.0-1079.844.4.0-1081.86

Fixed in:

4.15.0-1053.57

References

REPORThttps://github.com/johnsonwangqize/cve-linux/blob/master/CVE-2018-5995.md REPORThttps://ubuntu.com/security/CVE-2018-5995 REPORThttps://ubuntu.com/security/notices/USN-5343-1 REPORThttps://www.cve.org/CVERecord?id=CVE-2018-5995

CVSS Analysis

CVSS v3.0

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Related

CVE-2018-5995 USN-5343-1

Ecosystems

Ubuntu Pro 16.04 LTS Ubuntu Pro 14.04 LTS Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 LTS Ubuntu Pro 20.04 LTS

Timeline

PublishedAug 7, 2018

ModifiedJun 10, 2025

UBUNTU-CVE-2018-5995 | Mondoo Vulnerability Intelligence