Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2018-18397

21
FAUCET Score

CVE-2018-18397 is a medium-severity access control vulnerability affecting the Linux kernel before version 4.19.7, specifically impacting Canonical and Red Hat distributions. It allows a local attacker with low privileges to write data into holes within a tmpfs file, even if they only have read-only access to that file. While the CVSS score is 5.5, indicating a moderate impact on integrity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 4.19.7CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
3.11CPE matchmatch criteria
cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
4.0CPE matchmatch criteria
cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*
7.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
7.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

5.5MEDIUM

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
0.51%
Probability of exploitation in next 30 days
EPSS Percentile
40.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0051 is in the 92nd percentile among its peer group of 15,938 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (5)

github_advisorypatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-0:3.10.0-957.5.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-alt-0:4.14.0-115.7.1.el7a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.4 Extended Update SupportFixed in: kernel-0:3.10.0-693.44.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.5 Extended Update SupportFixed in: kernel-0:3.10.0-862.27.1.el7
View patch

Vendor Advisories (1)

redhatCVE-2018-18397Moderate

kernel: userfaultfd bypasses tmpfs file permissions

Nov 26, 2018

References

git.kernel.org / cgit/linux/kernel/git/torvalds/linux.git/commit
PatchThird Party Advisory
access.redhat.com / errata/RHBA-2019:0327
Third Party Advisory
access.redhat.com / errata/RHSA-2019:0163
Third Party Advisory
access.redhat.com / errata/RHSA-2019:0202
Third Party Advisory
access.redhat.com / errata/RHSA-2019:0324
Third Party Advisory
access.redhat.com / errata/RHSA-2019:0831
Third Party Advisory
bugs.chromium.org / p/project-zero/issues/detail
ExploitIssue TrackingThird Party Advisory
cdn.kernel.org / pub/linux/kernel/v4.x/ChangeLog-4.14.87
PatchVendor Advisory
cdn.kernel.org / pub/linux/kernel/v4.x/ChangeLog-4.19.7
PatchVendor Advisory
github.com / torvalds/linux/commit/29ec90660d68bbdd69507c1c8b4e33aa299278b1
PatchThird Party Advisory
usn.ubuntu.com / 3901-1
Third Party Advisory
usn.ubuntu.com / 3901-2
Third Party Advisory
usn.ubuntu.com / 3903-1
Third Party Advisory
usn.ubuntu.com / 3903-2
Third Party Advisory