CVE-2018-18653

The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
VendorProductVersion
canonicalubuntu_linux
18.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bullseye
5.10.223-1
fixed
buster
not-affected
stretch
not-affected
bullseye (security)
5.10.226-1
fixed
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
trixie
6.11.5-1
fixed
sid
6.11.6-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
cosmic
Fixed 4.18.0-12.13
released
bionic
not-affected
xenial
not-affected
trusty
not-affected
linux-aws
cosmic
Fixed 4.18.0-1006.7
released
bionic
not-affected
xenial
not-affected
trusty
not-affected
linux-aws-hwe
cosmic
dne
bionic
dne
xenial
not-affected
trusty
dne
linux-azure
cosmic
Fixed 4.18.0-1006.6
released
bionic
not-affected
xenial
not-affected
trusty
not-affected
linux-azure-edge
cosmic
dne
bionic
not-affected
xenial
not-affected
trusty
dne
linux-euclid
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-flo
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-gcp
cosmic
Fixed 4.18.0-1004.5
released
bionic
not-affected
xenial
not-affected
trusty
dne
linux-gcp-edge
cosmic
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-gke
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-goldfish
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-grouper
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-hwe
cosmic
dne
bionic
not-affected
xenial
not-affected
trusty
dne
linux-hwe-edge
cosmic
dne
bionic
not-affected
xenial
not-affected
trusty
dne
linux-kvm
cosmic
Fixed 4.18.0-1005.5
released
bionic
not-affected
xenial
not-affected
trusty
dne
linux-lts-trusty
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-utopic
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-vivid
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-wily
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-xenial
cosmic
dne
bionic
dne
xenial
dne
trusty
not-affected
linux-maguro
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-mako
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-manta
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-oem
cosmic
not-affected
bionic
not-affected
xenial
ignored
trusty
dne
linux-oracle
cosmic
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
linux-raspi2
cosmic
Fixed 4.18.0-1007.9
released
bionic
not-affected
xenial
not-affected
trusty
dne
linux-snapdragon
cosmic
dne
bionic
not-affected
xenial
not-affected
trusty
dne
Common Weakness Enumeration
References
https://launchpad.net/bugs/1798863
https://usn.ubuntu.com/3832-1/
https://usn.ubuntu.com/3835-1/
https://launchpad.net/bugs/1798863
https://usn.ubuntu.com/3832-1/
https://usn.ubuntu.com/3835-1/