CVE-2018-1108
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.9epss 1.8%
exploitation probability
1.8%top 24% of all CVEs
observed exploitation
nono source reports it
kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Affected products
kernel · driversReferences
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1108https://lists.debian.org/debian-lts-announce/2022/07/msg00000.htmlhttps://usn.ubuntu.com/3718-1/https://usn.ubuntu.com/3718-2/https://usn.ubuntu.com/3752-1/https://usn.ubuntu.com/3752-2/https://usn.ubuntu.com/3752-3/https://www.debian.org/security/2018/dsa-4188http://www.securityfocus.com/bid/104055