CVE-2018-1068

A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory.

Published: Mar 16, 2018
Updated: Nov 9, 2025
CVE: CVE-2018-1068
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.7
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Affected Software
References

Software	From	Fixed in
canonical / ubuntu_linux	16.04	16.04.x
canonical / ubuntu_linux	14.04	14.04.x
canonical / ubuntu_linux	12.04	12.04.x
canonical / ubuntu_linux	17.10	17.10.x
debian / debian_linux	8.0	8.0.x
debian / debian_linux	7.0	7.0.x
debian / debian_linux	9.0	9.0.x
redhat / enterprise_linux_desktop	7.0	7.0.x
redhat / enterprise_linux_workstation	7.0	7.0.x
redhat / enterprise_linux_server	7.0	7.0.x
redhat / virtualization_host	4.0	4.0.x
redhat / enterprise_linux_server_eus	7.5	7.5.x
redhat / enterprise_linux_server_tus	7.6	7.6.x
redhat / enterprise_linux_server_eus	7.6	7.6.x
redhat / enterprise_linux_server_aus	7.6	7.6.x
linux / linux_kernel	-	3.2.102
linux / linux_kernel	3.3	3.16.57
linux / linux_kernel	3.17	3.18.100
linux / linux_kernel	3.19	4.1.51
linux / linux_kernel	4.2	4.4.122
linux / linux_kernel	4.5	4.9.88
linux / linux_kernel	4.10	4.14.27
linux / linux_kernel	4.15	4.15.10

Vulnerability Database

300,444

CVE-2018-1068

Deep Security Visibility Without the Complexity