What’s Vulnerable › Vulnerabilities

CVE-2018-7754

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-10 · updated 2026-06-17
• Weakness: CWE-532

Description

The aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file.

Affected products

• Linux kernel: through 4.15; 4.16-rc1, 4.16-rc2, 4.16-rc3, 4.16-rc4

References

• https://elixir.bootlin.com/linux/v4.16-rc4/source/drivers/block/aoe/aoeblk.c#L421
• https://github.com/johnsonwangqize/cve-linux/blob/master/CVE-2018-7754.md
• https://elixir.bootlin.com/linux/v4.16-rc4/source/drivers/block/aoe/aoeblk.c#L421
• https://github.com/johnsonwangqize/cve-linux/blob/master/CVE-2018-7754.md

Get alerted when CVE-2018-7754 or the next vulnerability affects your stack