Medium severity · published May 24, 2018
CVE-2018-1000199
The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption
5.5
CVSS
1.2%
EPSS
No
On KEV
Description
The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
3.18 · source: NVD
DL
Debian Linux · Debian
7.0; 8.0; 9.0 · source: NVD
EL
Enterprise Linux · Redhat
7.0; 7.2; 7.3; 7.4; 7.5 · source: NVD
EL
Enterprise Linux Desktop · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
7.2; 7.3; 7.4 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
7.3; 7.4; 7.5 · source: NVD
EL
Enterprise Linux Server Tus · Redhat
7.2 · source: NVD
EL
Enterprise Linux Workstation · Redhat
7.0 · source: NVD
UL
Ubuntu Linux · Canonical
12.04; 14.04; 16.04; 17.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-1000199
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-1000199
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
Third Party Advisory
http://www.securitytracker.com/id/1040806
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1318
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1345
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1347
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1348
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability