CVE-2018-11508

The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.

• CWE-200

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0a0b98734479aa5b3c671d5190e86273372cab95Patch, Vendor Advisory
• http://www.securityfocus.com/bid/104292Third Party Advisory, VDB Entry
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1574Exploit, Issue Tracking, Third Party Advisory
• https://github.com/torvalds/linux/commit/0a0b98734479aa5b3c671d5190e86273372cab95Patch, Third Party Advisory
• https://usn.ubuntu.com/3695-1/Third Party Advisory
• https://usn.ubuntu.com/3695-2/Third Party Advisory
• https://usn.ubuntu.com/3697-1/Third Party Advisory
• https://usn.ubuntu.com/3697-2/Third Party Advisory
• https://www.exploit-db.com/exploits/46208/Exploit, Third Party Advisory, VDB Entry
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.9Release Notes, Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0a0b98734479aa5b3c671d5190e86273372cab95Patch, Vendor Advisory
• http://www.securityfocus.com/bid/104292Third Party Advisory, VDB Entry
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1574Exploit, Issue Tracking, Third Party Advisory
• https://github.com/torvalds/linux/commit/0a0b98734479aa5b3c671d5190e86273372cab95Patch, Third Party Advisory
• https://usn.ubuntu.com/3695-1/Third Party Advisory
• https://usn.ubuntu.com/3695-2/Third Party Advisory
• https://usn.ubuntu.com/3697-1/Third Party Advisory
• https://usn.ubuntu.com/3697-2/Third Party Advisory
• https://www.exploit-db.com/exploits/46208/Exploit, Third Party Advisory, VDB Entry
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.9Release Notes, Vendor Advisory

Published

May 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11502An issue was discovered in the Moderator Log Notes plugin 1.…
• CVE-2018-11503The isfootnote function in markdown.c in libmarkdown.a in DI…
• CVE-2018-11504The islist function in markdown.c in libmarkdown.a in DISCOU…
• CVE-2018-11505The Werewolf Online application 0.8.8 for Android allows att…
• CVE-2018-11506The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the L…7.8
• CVE-2018-11507An issue was discovered in Free Lossless Image Format (FLIF)…
• CVE-2018-11509ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin user…
• CVE-2018-1151The web server on Western Digital TV Media Player 1.03.07 an…
• CVE-2018-11510The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauth…
• CVE-2018-11511The tree list functionality in the photo gallery application…
• CVE-2018-11512Stored cross-site scripting (XSS) vulnerability in the "Webs…
• CVE-2018-11514PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Un…