CVE-2018-1000199

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.

• CWE-119

• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
• http://www.securitytracker.com/id/1040806Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2018:1318Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1345Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1347Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1348Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1354Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1355Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1374Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlThird Party Advisory
• https://lkml.org/lkml/2018/4/6/813Mailing List, Patch, Third Party Advisory
• https://usn.ubuntu.com/3641-1/Third Party Advisory
• https://usn.ubuntu.com/3641-2/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4187Third Party Advisory
• https://www.debian.org/security/2018/dsa-4188Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
• http://www.securitytracker.com/id/1040806Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2018:1318Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1345Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1347Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1348Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1354Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1355Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:1374Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlThird Party Advisory
• https://lkml.org/lkml/2018/4/6/813Mailing List, Patch, Third Party Advisory
• https://usn.ubuntu.com/3641-1/Third Party Advisory
• https://usn.ubuntu.com/3641-2/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4187Third Party Advisory
• https://www.debian.org/security/2018/dsa-4188Third Party Advisory

Published

May 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000193A improper neutralization of control sequences vulnerability…4.3
• CVE-2018-1000194A path traversal vulnerability exists in Jenkins 2.120 and o…8.1
• CVE-2018-1000195A server-side request forgery vulnerability exists in Jenkin…4.3
• CVE-2018-1000196A exposure of sensitive information vulnerability exists in …
• CVE-2018-1000197An improper authorization vulnerability exists in Jenkins Bl…
• CVE-2018-1000198A XML external entity processing vulnerability exists in Jen…
• CVE-2018-1000200The Linux Kernel versions 4.14, 4.15, and 4.16 has a null po…
• CVE-2018-1000201ruby-ffi version 1.9.23 and earlier has a DLL loading issue …
• CVE-2018-1000202A persisted cross-site scripting vulnerability exists in Jen…
• CVE-2018-1000203Soar Labs Soar Coin version up to and including git commit 4…
• CVE-2018-1000204Linux Kernel version 3.18 to 4.16 incorrectly handles an SG_…
• CVE-2018-1000205U-Boot contains a CWE-20: Improper Input Validation vulnerab…5.5