In the function sbusfbioctlhelper() in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information leakage for the FBIOPUTCMAPSPARC and FBIOGETCMAPSPARC commands.
{ "availability": "No subscription required", "ubuntu_priority": "negligible", "binaries": [ { "linux-headers-4.15.0-1023-azure": "4.15.0-1023.24~14.04.1", "linux-azure-cloud-tools-4.15.0-1023-dbgsym": "4.15.0-1023.24~14.04.1", "linux-azure-headers-4.15.0-1023": "4.15.0-1023.24~14.04.1", "linux-cloud-tools-4.15.0-1023-azure": "4.15.0-1023.24~14.04.1", "linux-modules-4.15.0-1023-azure": "4.15.0-1023.24~14.04.1", "linux-azure-tools-4.15.0-1023-dbgsym": "4.15.0-1023.24~14.04.1", "linux-modules-extra-4.15.0-1023-azure": "4.15.0-1023.24~14.04.1", "linux-azure-tools-4.15.0-1023": "4.15.0-1023.24~14.04.1", "linux-image-unsigned-4.15.0-1023-azure": "4.15.0-1023.24~14.04.1", "linux-image-unsigned-4.15.0-1023-azure-dbgsym": "4.15.0-1023.24~14.04.1", "linux-tools-4.15.0-1023-azure": "4.15.0-1023.24~14.04.1", "linux-azure-cloud-tools-4.15.0-1023": "4.15.0-1023.24~14.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "negligible", "binaries": [ { "linux-headers-4.15.0-1023-azure": "4.15.0-1023.24", "linux-azure-cloud-tools-4.15.0-1023-dbgsym": "4.15.0-1023.24", "linux-azure-headers-4.15.0-1023": "4.15.0-1023.24", "linux-cloud-tools-4.15.0-1023-azure": "4.15.0-1023.24", "linux-modules-4.15.0-1023-azure": "4.15.0-1023.24", "linux-azure-tools-4.15.0-1023-dbgsym": "4.15.0-1023.24", "linux-modules-extra-4.15.0-1023-azure": "4.15.0-1023.24", "linux-azure-tools-4.15.0-1023": "4.15.0-1023.24", "linux-image-unsigned-4.15.0-1023-azure": "4.15.0-1023.24", "linux-image-unsigned-4.15.0-1023-azure-dbgsym": "4.15.0-1023.24", "linux-tools-4.15.0-1023-azure": "4.15.0-1023.24", "linux-azure-cloud-tools-4.15.0-1023": "4.15.0-1023.24" } ] }