cvedb.io
CVE-2018-1108
MEDIUM · CVSS 5.9
EPSS exploitation probability: 0%
Published 2018-05-21T21:29:00.237 · Last modified 2026-06-17T01:50:29.733

Summary

kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.

Affected products

linux — linux_kernel

Does this affect you?

Add your gear to cvedb and we'll alert you only when linux ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.