CVE-2018-5750 — kernel: Kernel address information leak in drivers/acpi/sbshc.c:acpi_smbus_hc_add() function potentially allowing KASLR bypass

Back Back to CVE browser

MEDIUM

kernel: Kernel address information leak in drivers/acpi/sbshc.c:acpi_smbus_hc_add() function potentially allowing KASLR bypass

Published Jan 26, 2018

5.5

MEDIUM

CVSS 3.0

EPSS 0.49%

Description

The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call.

Affected products

Red Hat Enterprise Linux 7

kernel-0:3.10.0-862.el7

Fixed · RHSA-2018:1062
Red Hat Enterprise Linux 7

kernel-alt-0:4.14.0-115.el7a

Fixed · RHSA-2018:2948
Red Hat Enterprise Linux 7

kernel-rt-0:3.10.0-862.rt56.804.el7

Fixed · RHSA-2018:0676
Red Hat Enterprise Linux 5

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise MRG 2

realtime-kernel

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	kernel-0:3.10.0-862.el7	Fixed	RHSA-2018:1062
Red Hat Enterprise Linux 7	kernel-alt-0:4.14.0-115.el7a	Fixed	RHSA-2018:2948
Red Hat Enterprise Linux 7	kernel-rt-0:3.10.0-862.rt56.804.el7	Fixed	RHSA-2018:0676
Red Hat Enterprise Linux 5	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise MRG 2	realtime-kernel	Not affected	n/a

Remediation

Red Hat statement

This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG 2, as KASLR feature is not present or enabled in these products. This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7, its real-time kernel, Red Hat Enterprise Linux 7 for ARM 64 and Red Hat Enterprise Linux 7 for Power 9 LE. Future Linux kernel updates for the respective releases may address this issue.

Metrics

0.49% 0.00490

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00490

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (14 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.49% (0.00490)	39.85th	v5 (v2026.06.15)
Jun 15, 2026	0.50% (0.00499)	38.59th	v5 (v2026.06.15)
Mar 17, 2025	0.02% (0.00023)	3.57th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	11.89th	v3 (v2023.03.01)
Jul 2, 2024	0.04% (0.00044)	10.25th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00044)	8.24th	v3 (v2023.03.01)
Mar 6, 2023	1.55% (0.01547)	74.98th	v2 (v2022.01.01)
Feb 23, 2023	1.55% (0.01547)	74.94th	v2 (v2022.01.01)
Apr 1, 2022	1.55% (0.01547)	72.92th	v2 (v2022.01.01)
Feb 4, 2022	1.55% (0.01547)	51.82th	v2 (v2022.01.01)
Feb 3, 2022	1.66% (0.01659)	33.93th	v1
Jan 6, 2022	1.66% (0.01659)	33.23th	v1
Sep 1, 2021	1.66% (0.01659)	73.35th	v1
Apr 14, 2021	1.66% (0.01659)	0.00th	v1

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (18)

http://www.securitytracker.com/id/1040319
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2018:0676
vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:1062
vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:2948
vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2018-5750
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1539706
Issue Tracking
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-5750
https://patchwork.kernel.org/patch/10174835/
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://usn.ubuntu.com/3631-1/
vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://usn.ubuntu.com/3631-2/
vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://usn.ubuntu.com/3697-1/
vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://usn.ubuntu.com/3697-2/
vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://usn.ubuntu.com/3698-1/
vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://usn.ubuntu.com/3698-2/
vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2018-5750
https://www.debian.org/security/2018/dsa-4120
vendor-advisoryx_refsource_DEBIANThird Party Advisory
https://www.debian.org/security/2018/dsa-4187
vendor-advisoryx_refsource_DEBIANThird Party Advisory

Link	Providers	Tags
http://www.securitytracker.com/id/1040319		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2018:0676		vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:1062		vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:2948		vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2018-5750		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1539706		Issue Tracking
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-5750
https://patchwork.kernel.org/patch/10174835/		x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://usn.ubuntu.com/3631-1/		vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://usn.ubuntu.com/3631-2/		vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://usn.ubuntu.com/3697-1/		vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://usn.ubuntu.com/3697-2/		vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://usn.ubuntu.com/3698-1/		vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://usn.ubuntu.com/3698-2/		vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2018-5750
https://www.debian.org/security/2018/dsa-4120		vendor-advisoryx_refsource_DEBIANThird Party Advisory
https://www.debian.org/security/2018/dsa-4187		vendor-advisoryx_refsource_DEBIANThird Party Advisory