{"result":"OK","data":{"documents":{"CVE-2018-7755":{"id":"CVE-2018-7755","vendorId":null,"type":"cve","bulletinFamily":"cve","title":"CVE-2018-7755","description":"An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.","attachments":[],"timestamps":{"created":"2018-03-08T04:29:01Z","updated":"2026-07-16T00:08:52.916000Z","enriched":"2026-06-19T01:24:10.326000Z","reviewed":"2026-07-18T10:40:08.418000Z","webApplicabilityUpdated":null,"metricsUpdated":"2026-07-16T00:08:52.916000Z","contentUpdated":"2026-06-17T19:27:11.952000Z"},"published":"2018-03-08T07:00:00","modified":"2026-06-17T02:03:39","epss":[{"cve":"CVE-2018-7755","epss":0.00683,"percentile":0.4842,"date":"2026-07-20"}],"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"nvd"},"metrics":{"nvd":{"cvss2":{"source":"nvd","version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false,"temporalScore":2.1},"cvss3":{"source":"nvd","version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}}},"cvss2":{"cvssV2":{"source":"nvd","version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false,"temporalScore":2.1}},"cvss3":{"cvssV3":{"source":"nvd","version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},"cvss4":{},"href":"https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7755","sourceAvailable":true,"reporter":"mitre","references":["https://access.redhat.com/errata/RHSA-2019:2043","https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html","https://usn.ubuntu.com/3696-1/","https://www.debian.org/security/2018/dsa-4308","https://usn.ubuntu.com/3698-2/","https://access.redhat.com/errata/RHSA-2019:2029","https://lkml.org/lkml/2018/3/7/1116","https://usn.ubuntu.com/3695-2/","https://usn.ubuntu.com/3697-2/","https://usn.ubuntu.com/3697-1/","https://usn.ubuntu.com/3695-1/","https://usn.ubuntu.com/3698-1/","https://usn.ubuntu.com/3696-2/"],"cvelist":["CVE-2018-7755"],"immutableFields":[],"lastseen":"2026-06-17T19:27:11","viewCount":268,"enchantments":{"dependencies":{"references":[{"type":"amazon","idList":["ALAS-2019-1279","ALAS2-2018-1100","ALAS2-2019-1279"]},{"type":"bdu_fstec","idList":["BDU:2019-03459"]},{"type":"centos","idList":["CESA-2019:2029"]},{"type":"cloudfoundry","idList":["CFOUNDRY:E0F2211F76756FB0A1DC15D3072C87A0"]},{"type":"cnvd","idList":["CNVD-2018-06691"]},{"type":"cvelist","idList":["CVELIST:CVE-2018-7755"]},{"type":"debian","idList":["DEBIAN:DLA-1531-1:834CC","DEBIAN:DSA-4308-1:A5A75","DEBIAN:DSA-4308-1:D561A"]},{"type":"debiancve","idList":["DEBIANCVE:CVE-2018-7755"]},{"type":"euvd","idList":["EUVD-2018-19467"]},{"type":"f5","idList":["F5:K03007515"]},{"type":"ibm","idList":["1615871DB6D900C69F1E3E99183BE8581ED1CED870E2C3B0E3B990E1C56F30E0","4BB2759DF5CBB6BF54A7D60BF1046942C755D661255DAAC4EF3C0614D1A3AF9A"]},{"type":"mageia","idList":["MGASA-2018-0417","MGASA-2018-0418","MGASA-2018-0419"]},{"type":"ncsc","idList":["NCSC-2022-0422"]},{"type":"nessus","idList":["AL2_ALAS-2019-1279.NASL","ALA_ALAS-2019-1279.NASL","CENTOS_RHSA-2019-2029.NASL","DEBIAN_DLA-1531.NASL","DEBIAN_DSA-4308.NASL","EULEROS_SA-2019-1513.NASL","EULEROS_SA-2019-2531.NASL","MIRACLE_LINUX_AXSA-2019-4338.NASL","NUTANIX_NXSA-AOS-5_11_3.NASL","NUTANIX_NXSA-AOS-5_16_0_1.NASL","NUTANIX_NXSA-AOS-5_16_1.NASL","NUTANIX_NXSA-AOS-5_17.NASL","ORACLELINUX_ELSA-2018-4299.NASL","ORACLELINUX_ELSA-2018-4300.NASL","ORACLELINUX_ELSA-2018-4301.NASL","ORACLELINUX_ELSA-2018-4304.NASL","ORACLELINUX_ELSA-2019-2029.NASL","ORACLELINUX_ELSA-2019-4316.NASL","ORACLELINUX_ELSA-2019-4509.NASL","ORACLEVM_OVMSA-2018-0286.NASL","REDHAT-RHSA-2019-2029.NASL","REDHAT-RHSA-2019-2043.NASL","REDHAT_UNPATCHED-KERNEL-RHEL7.NASL","REDHAT_UNPATCHED_KERNEL-ALT-RHEL7.NASL","SLACKWARE_SSA_2019-030-01.NASL","SL_20190806_KERNEL_ON_SL7_X.NASL","SUSE_SU-2022-1651-1.NASL","SUSE_SU-2022-1668-1.NASL","SUSE_SU-2022-1686-1.NASL","SUSE_SU-2022-2077-1.NASL","SUSE_SU-2022-2082-1.NASL","SUSE_SU-2022-2111-1.NASL","UBUNTU_USN-3695-1.NASL","UBUNTU_USN-3695-2.NASL","UBUNTU_USN-3696-1.NASL","UBUNTU_USN-3696-2.NASL","UBUNTU_USN-3697-1.NASL","UBUNTU_USN-3697-2.NASL","UBUNTU_USN-3698-1.NASL","UNITY_LINUX_UTSA-2026-001302.NASL","UNITY_LINUX_UTSA-2026-003532.NASL","UNITY_LINUX_UTSA-2026-003710.NASL","UNPATCHED_CVE_2018_7755.NASL"]},{"type":"nvd","idList":["NVD:CVE-2018-7755"]},{"type":"openvas","idList":["OPENVAS:1361412562310704308","OPENVAS:1361412562310843572","OPENVAS:1361412562310843573","OPENVAS:1361412562310843574","OPENVAS:1361412562310843575","OPENVAS:1361412562310843576","OPENVAS:1361412562310843577","OPENVAS:1361412562310843578","OPENVAS:1361412562310843595","OPENVAS:1361412562310843596","OPENVAS:1361412562310854753","OPENVAS:1361412562310891531","OPENVAS:13614125623111020180417","OPENVAS:13614125623111020180418","OPENVAS:13614125623111020180419","OPENVAS:13614125623111220181529","OPENVAS:136141256231112201836982","OPENVAS:136141256231113201903001","OPENVAS:1361412562311220191513","OPENVAS:1361412562311220192531","OPENVAS:13614125623114202216511","OPENVAS:13614125623114202216861","OPENVAS:13614125623114202220771","OPENVAS:13614125623114202220821","OPENVAS:13614125623114202221111","OPENVAS:13614125623114202304161"]},{"type":"oraclelinux","idList":["ELSA-2018-4299","ELSA-2018-4300","ELSA-2018-4301","ELSA-2018-4304","ELSA-2019-2029","ELSA-2019-4316","ELSA-2019-4509"]},{"type":"osv","idList":["OSV:DEBIAN-CVE-2018-7755","OSV:DLA-1529-1","OSV:DLA-1531-1","OSV:DSA-4308-1","OSV:MGASA-2018-0417","OSV:MGASA-2018-0418","OSV:MGASA-2018-0419","OSV:RHSA-2019:2029","OSV:RHSA-2019:2043","OSV:SUSE-SU-2022:1651-1","OSV:SUSE-SU-2022:1668-1","OSV:SUSE-SU-2022:1686-1","OSV:SUSE-SU-2022:2077-1","OSV:SUSE-SU-2022:2082-1","OSV:SUSE-SU-2022:2111-1","OSV:SUSE-SU-2023:0416-1","OSV:UBUNTU-CVE-2018-7755","OSV:USN-3695-1","OSV:USN-3695-2","OSV:USN-3696-1","OSV:USN-3696-2","OSV:USN-3697-2","OSV:USN-3698-1"]},{"type":"photon","idList":["PHSA-2018-0044"]},{"type":"prion","idList":["PRION:CVE-2018-7755"]},{"type":"ptsecurity","idList":["PT-2016-3456","PT-2017-12369","PT-2017-12396","PT-2017-13024","PT-2017-3953","PT-2018-10028","PT-2018-10156","PT-2018-10291","PT-2018-1040","PT-2018-11064","PT-2018-1240","PT-2018-1241","PT-2018-1243","PT-2018-1587","PT-2018-1834","PT-2018-18365","PT-2018-2558","PT-2018-2560","PT-2018-2581","PT-2018-2582","PT-2018-2583","PT-2018-2586","PT-2018-2601","PT-2018-2684","PT-2018-2758","PT-2018-2804","PT-2018-2862","PT-2018-2960","PT-2018-3026","PT-2018-3027","PT-2018-3388","PT-2018-3523","PT-2018-3842","PT-2018-9372","PT-2018-9618","PT-2019-1115","PT-2019-12500","PT-2019-19665","PT-2019-2418","PT-2019-2821","PT-2019-2822","PT-2019-4107","PT-2019-4108","PT-2019-4886","PT-2019-5303","PT-2019-5423","PT-2019-5537","PT-2019-5609","PT-2019-5758","PT-2019-6223","PT-2020-3141","PT-2020-5371","PT-2020-6166","PT-2020-6446","PT-2020-6651","PT-2020-6690","PT-2021-1522","PT-2021-3317","PT-2021-5151","PT-2021-6407","PT-2021-7013","PT-2021-7323","PT-2022-10992","PT-2022-2565","PT-2022-2852","PT-2022-2970","PT-2022-2971","PT-2022-3306","PT-2022-3466","PT-2022-4045","PT-2022-4133","PT-2022-4284","PT-2022-4299","PT-2022-4329","PT-2022-4331","PT-2022-4533","PT-2022-4782","PT-2022-4817","PT-2022-4835","PT-2022-4893","PT-2022-5015","PT-2022-5551","PT-2022-5917","PT-2022-5925","PT-2022-6169","PT-2022-6193","PT-2022-6236","PT-2022-6242","PT-2022-6329","PT-2022-6331","PT-2022-6763","PT-2022-7114","PT-2022-7127","PT-2022-9728","PT-2023-2689"]},{"type":"redhat","idList":["RHSA-2019:2029","RHSA-2019:2029-CVE-2018-7755","RHSA-2019:2043","RHSA-2019:2043-CVE-2018-7755"]},{"type":"redhatcve","idList":["RH:CVE-2018-7755"]},{"type":"slackware","idList":["SSA-2019-030-01"]},{"type":"susecve","idList":["SUSECVE:CVE-2018-7755"]},{"type":"ubuntu","idList":["USN-3695-1","USN-3695-2","USN-3696-1","USN-3696-2","USN-3697-1","USN-3697-2","USN-3698-1","USN-3698-2"]},{"type":"ubuntucve","idList":["UB:CVE-2018-7755"]},{"type":"veracode","idList":["VERACODE:21055"]}]},"score":{"value":6.2,"uncertanity":0.7,"vector":"NONE"},"backreferences":{"references":[{"type":"amazon","idList":["ALAS-2019-1279"]},{"type":"centos","idList":["CESA-2019:2029"]},{"type":"cloudfoundry","idList":["CFOUNDRY:E0F2211F76756FB0A1DC15D3072C87A0"]},{"type":"debian","idList":["DEBIAN:DLA-1531-1:834CC","DEBIAN:DSA-4308-1:D561A"]},{"type":"debiancve","idList":["DEBIANCVE:CVE-2018-7755"]},{"type":"ibm","idList":["4BB2759DF5CBB6BF54A7D60BF1046942C755D661255DAAC4EF3C0614D1A3AF9A"]},{"type":"nessus","idList":["SLACKWARE_SSA_2019-030-01.NASL","UBUNTU_USN-3695-1.NASL","UBUNTU_USN-3695-2.NASL","UBUNTU_USN-3696-1.NASL","UBUNTU_USN-3696-2.NASL","UBUNTU_USN-3697-1.NASL","UBUNTU_USN-3697-2.NASL","UBUNTU_USN-3698-1.NASL"]},{"type":"openvas","idList":["OPENVAS:1361412562310843572","OPENVAS:1361412562310843573","OPENVAS:1361412562310843574","OPENVAS:1361412562310843575","OPENVAS:1361412562310843576","OPENVAS:1361412562310843577","OPENVAS:1361412562310843578"]},{"type":"oraclelinux","idList":["ELSA-2018-4299"]},{"type":"photon","idList":["PHSA-2018-0044"]},{"type":"redhat","idList":["RHSA-2019:2029"]},{"type":"slackware","idList":["SSA-2019-030-01"]},{"type":"ubuntu","idList":["USN-3695-1","USN-3695-2","USN-3696-1","USN-3696-2","USN-3697-1","USN-3697-2","USN-3698-1","USN-3698-2"]},{"type":"ubuntucve","idList":["UB:CVE-2018-7755"]}]},"exploitation":null,"short_description":"Linux kernel floppy driver vulnerability","tags":["linux","kernel","floppy driver","vulnerability","security","protection","kaslr","nvd","cve-2018-7755"],"vulnersScore":6.2},"aiDescription":"CVE-2018-7755 affects the Linux kernel floppy driver: the fd_locked_ioctl path in drivers/block/floppy.c copies a kernel pointer to user memory in response to FDGETPRM, enabling a local attacker with floppy access to discover kernel code/data locations and bypass KASLR. The issue is in kernel versions up to 4.15.7. Public advisories confirm this exact flaw and outline remediation by updating the kernel to a fixed release. In the supplied documents, remediation references include Linux kernel updates (e.g., kernel packages built around 4.14.x/4.15.x enumerations and firmware fixes) and advisories indicating the fix pack availability (e.g., ALAS2-2018-1100, ALAS-2019-1279, and related CentOS/Debian advisories). No exploit details or attack vectors beyond the FDGETPRM kernel-pointer leakage are stated in the provided sources.","cpe":["cpe:/o:linux:linux_kernel::::"],"cpe23":["cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"],"cwe":["CWE-200"],"vulnStatus":"Modified","affectedSoftware":[{"cpeName":"linux:linux_kernel","version":"4.15.7","operator":"le","name":"linux linux_kernel"}],"affectedConfiguration":[],"cpeConfiguration":{},"cpeConfigurations":{"nvdCpeConfiguration":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"versionEndIncluding":"4.15.7","criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*"}]}]}],"_index":true},"extraReferences":[{"url":"https://access.redhat.com/errata/RHSA-2019:2043"},{"url":"https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html"},{"url":"https://usn.ubuntu.com/3696-1/"},{"url":"https://www.debian.org/security/2018/dsa-4308"},{"url":"https://usn.ubuntu.com/3698-2/"},{"url":"https://access.redhat.com/errata/RHSA-2019:2029"},{"url":"https://lkml.org/lkml/2018/3/7/1116"},{"url":"https://usn.ubuntu.com/3695-2/"},{"url":"https://usn.ubuntu.com/3697-2/"},{"url":"https://usn.ubuntu.com/3697-1/"},{"url":"https://usn.ubuntu.com/3695-1/"},{"url":"https://usn.ubuntu.com/3698-1/"},{"url":"https://usn.ubuntu.com/3696-2/"}],"cnaAffected":[],"cnaCpeApplicability":[],"solutions":[],"workarounds":[],"impacts":[],"exploits":[{"id":"CVE-2018-7755","href":"https://lkml.org/lkml/2018/3/7/1116","type":"nvd"}],"problemTypes":[],"assigned":"2018-03-08T00:00:00","origin":"composite","threatData":{},"webApplicability":{"applicable":null,"vulnerabilities":[]}}}}}