CVE-2018-5995

Published: Aug 7, 2018Modified: Jun 17, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The pcpu_embed_first_chunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "pages/cpu" printk call.

Affected (1)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 4.14.14

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (14)

http://www.securityfocus.com/bid/105049

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://github.com/johnsonwangqize/cve-linux/blob/master/CVE-2018-5995.md

Source: cve@mitre.org

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html

Source: cve@mitre.org

https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html

Source: cve@mitre.org

https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html

Source: cve@mitre.org

https://seclists.org/bugtraq/2019/Aug/18

Source: cve@mitre.org

https://www.debian.org/security/2019/dsa-4497

Source: cve@mitre.org

http://www.securityfocus.com/bid/105049