{"action":"Upgrade linux to 4.16.12-1 or later.","affected":[{"fixed":"4.16.12-1","introduced":"0"}],"component":"linux","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["4.16.12-1"],"id":"tcs_01M5NCV1EKMNE6DS5NT66EKXMX","modified_at":"2026-10-23T18:02:55.778776599Z","published_at":"2018-06-26T14:29:02.160Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-1000204","https://security-tracker.debian.org/tracker/CVE-2018-1000204"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-1000204#Debian:14/linux","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-1000204"}],"summary":"Linux Kernel version 3.18 to 4.16 incorrectly handles an SG_IO ioctl on /dev/sg0 with dxfer_direction=SG_DXFER_FROM_DEV and an empty 6-byte cmdp. This may lead to copying up to 1000 kernel heap pages"}