Oval Definition:	oval:com.ubuntu.cosmic:def:20189422000
Revision Date: 2018-11-06 Version: 1 Title: CVE-2018-9422 on Ubuntu 18.10 (cosmic) - medium. Description: In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstream kernel. Family: unix Class: vulnerability Status: Reference(s): CVE-2018-9422 Platform(s): Ubuntu 18.10 Product(s): Definition Synopsis Ubuntu 18.10 (cosmic) is installed. AND Package Information NOT While related to the CVE in some way, the 'linux' package in cosmic is not affected (note: '4.15.0-20.21'). OR NOT While related to the CVE in some way, the 'linux-aws' package in cosmic is not affected (note: '4.15.0-1007.7'). OR NOT While related to the CVE in some way, the 'linux-azure' package in cosmic is not affected (note: '4.15.0-1009.9'). OR NOT While related to the CVE in some way, the 'linux-gcp' package in cosmic is not affected (note: '4.15.0-1006.6'). OR NOT While related to the CVE in some way, the 'linux-kvm' package in cosmic is not affected (note: '4.15.0-1008.8'). OR NOT While related to the CVE in some way, the 'linux-oem' package in cosmic is not affected (note: '4.15.0-1004.5'). OR NOT While related to the CVE in some way, the 'linux-oracle' package in cosmic is not affected (note: '4.15.0-1007.9'). OR NOT While related to the CVE in some way, the 'linux-raspi2' package in cosmic is not affected (note: '4.15.0-1010.11').
BACK