UBUNTU-CVE-2018-6412

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2018-6412
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-6412.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-6412
Upstream
Published
2018-01-31T07:29:00Z
Modified
2025-07-18T16:44:30Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
  • Ubuntu - negligible
Summary
[none]
Details

In the function sbusfbioctlhelper() in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information leakage for the FBIOPUTCMAPSPARC and FBIOGETCMAPSPARC commands.

References

Affected packages

Ubuntu:Pro:FIPS:16.04:LTS / linux-fips

Package

Name
linux-fips
Purl
pkg:deb/ubuntu/linux-fips@4.4.0-1008.10?arch=source&distro=fips-updates/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-1008.10

Affected versions

4.*

4.4.0-1003.3
4.4.0-1005.5
4.4.0-1006.6

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "block-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "crypto-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "dasd-extra-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "dasd-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "fat-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "fb-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "firewire-core-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "floppy-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "fs-core-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "fs-secondary-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "input-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "ipmi-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "irda-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "kernel-image-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-buildinfo-4.4.0-1008-fips",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-fips-cloud-tools-common",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-fips-headers-4.4.0-1008",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-fips-source-4.4.0",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-fips-tools-4.4.0-1008",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-headers-4.4.0-1008-fips",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-image-4.4.0-1008-fips",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-image-4.4.0-1008-fips-dbgsym",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-image-hmac-4.4.0-1008-fips",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-image-unsigned-4.4.0-1008-fips",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-image-unsigned-4.4.0-1008-fips-dbgsym",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-4.4.0-1008-fips",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-modules-4.4.0-1008-fips",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-modules-extra-4.4.0-1008-fips",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-tools-4.4.0-1008-fips",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "linux-udebs-fips",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "md-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "message-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "mouse-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "multipath-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "nfs-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "nic-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "nic-pcmcia-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "nic-shared-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "nic-usb-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "parport-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "pata-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "pcmcia-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "pcmcia-storage-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "plip-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "ppp-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "sata-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "scsi-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "serial-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "speakup-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "storage-core-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "usb-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "virtio-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        },
        {
            "binary_name": "vlan-modules-4.4.0-1008-fips-di",
            "binary_version": "4.4.0-1008.10"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}

Ubuntu:Pro:20.04:LTS / linux-azure-fde

Package

Name
linux-azure-fde
Purl
pkg:deb/ubuntu/linux-azure-fde@5.4.0-1103.109+cvm1.1?arch=source&distro=esm-infra/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1063.66+cvm2.2
5.4.0-1063.66+cvm3.2
5.4.0-1064.67+cvm1.1
5.4.0-1065.68+cvm2.1
5.4.0-1067.70+cvm1.1
5.4.0-1068.71+cvm1.1
5.4.0-1069.72+cvm1.1
5.4.0-1070.73+cvm1.1
5.4.0-1072.75+cvm1.1
5.4.0-1073.76+cvm1.1
5.4.0-1074.77+cvm1.1
5.4.0-1076.79+cvm1.1
5.4.0-1078.81+cvm1.1
5.4.0-1080.83+cvm1.1
5.4.0-1083.87+cvm1.1
5.4.0-1085.90+cvm1.1
5.4.0-1085.90+cvm2.1
5.4.0-1086.91+cvm1.1
5.4.0-1089.94+cvm1.2
5.4.0-1090.95+cvm1.1
5.4.0-1091.96+cvm1.1
5.4.0-1092.97+cvm1.1
5.4.0-1095.101+cvm1.1
5.4.0-1098.104+cvm1.1
5.4.0-1100.106+cvm1.1
5.4.0-1103.109+cvm1.1

Ubuntu:Pro:20.04:LTS / linux-gke

Package

Name
linux-gke
Purl
pkg:deb/ubuntu/linux-gke@5.4.0-1105.112?arch=source&distro=esm-infra/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1033.35
5.4.0-1035.37
5.4.0-1036.38
5.4.0-1037.39
5.4.0-1039.41
5.4.0-1041.43
5.4.0-1042.44
5.4.0-1043.45
5.4.0-1044.46
5.4.0-1046.48
5.4.0-1049.52
5.4.0-1051.54
5.4.0-1052.55
5.4.0-1053.56
5.4.0-1054.57
5.4.0-1055.58
5.4.0-1056.59
5.4.0-1057.60
5.4.0-1059.62
5.4.0-1061.64
5.4.0-1062.65
5.4.0-1063.66
5.4.0-1065.68
5.4.0-1066.69
5.4.0-1067.70
5.4.0-1068.71
5.4.0-1071.76
5.4.0-1072.77
5.4.0-1074.79
5.4.0-1076.82
5.4.0-1078.84
5.4.0-1080.86
5.4.0-1081.87
5.4.0-1083.89
5.4.0-1084.90
5.4.0-1086.93
5.4.0-1087.94
5.4.0-1090.97
5.4.0-1091.98
5.4.0-1094.101
5.4.0-1095.102
5.4.0-1096.103
5.4.0-1097.104
5.4.0-1098.105
5.4.0-1099.106
5.4.0-1100.107
5.4.0-1101.108
5.4.0-1102.109
5.4.0-1103.110
5.4.0-1104.111
5.4.0-1105.112

Ubuntu:Pro:20.04:LTS / linux-raspi2

Package

Name
linux-raspi2
Purl
pkg:deb/ubuntu/linux-raspi2@5.4.0-1006.6?arch=source&distro=esm-infra/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1007.8
5.3.0-1014.16
5.3.0-1015.17
5.3.0-1017.19
5.4.0-1004.4
5.4.0-1006.6

Ubuntu:Pro:20.04:LTS / linux-riscv

Package

Name
linux-riscv
Purl
pkg:deb/ubuntu/linux-riscv@5.4.0-40.45?arch=source&distro=esm-infra/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-24.28
5.4.0-26.30
5.4.0-27.31
5.4.0-28.32
5.4.0-30.34
5.4.0-31.35
5.4.0-33.37
5.4.0-34.38
5.4.0-36.41
5.4.0-37.42
5.4.0-39.44
5.4.0-40.45

Ubuntu:22.04:LTS / linux-intel-iot-realtime

Package

Name
linux-intel-iot-realtime
Purl
pkg:deb/ubuntu/linux-intel-iot-realtime@5.15.0-1073.75?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1073.75

Ubuntu:22.04:LTS / linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime@5.15.0-1032.35?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1032.35

Ubuntu:22.04:LTS / linux-riscv

Package

Name
linux-riscv
Purl
pkg:deb/ubuntu/linux-riscv@5.15.0-1028.32?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1004.4
5.13.0-1006.6+22.04.1
5.13.0-1007.7+22.04.1
5.13.0-1010.11+22.04.1
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1006.6
5.15.0-1007.7
5.15.0-1008.8
5.15.0-1011.12
5.15.0-1012.13
5.15.0-1014.16
5.15.0-1015.17
5.15.0-1016.18
5.15.0-1017.19
5.15.0-1018.21
5.15.0-1019.22
5.15.0-1020.23
5.15.0-1022.26
5.15.0-1023.27
5.15.0-1026.30
5.15.0-1027.31
5.15.0-1028.32

Ubuntu:24.04:LTS / linux-raspi-realtime

Package

Name
linux-raspi-realtime
Purl
pkg:deb/ubuntu/linux-raspi-realtime@6.8.0-2019.20?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.8.0-2019.20