The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via vectors related to setting an RHINHERIT flag on a directory.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Oct 27, 2017 | Sep 15, 2017 |
| Debian | — | Upgrade linux | Sep 25, 2017 | Sep 15, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 12, 2017 | Sep 15, 2017 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.10.0-38-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1078-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-98-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-3.13.0-135-lowlatencyUpgrade linux-image-4.4.0-1009-kvmUpgrade linux-image-4.4.0-98-genericUpgrade linux-image-3.13.0-135-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-135-powerpc-e500Upgrade linux-image-3.13.0-135-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.10.0-1008-gcpUpgrade linux-image-3.13.0-135-powerpc64-embUpgrade linux-image-4.4.0-98-powerpc-e500mcUpgrade linux-image-4.4.0-1039-awsUpgrade linux-image-4.4.0-1033-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.10.0-1020-raspi2Upgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-98-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-135-powerpc64-smpUpgrade linux-image-4.4.0-98-powerpc64-embUpgrade linux-image-4.10.0-38-generic-lpaeUpgrade linux-image-4.4.0-98-powerpc-smpUpgrade linux-image-4.10.0-38-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-135-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-1076-raspi2Upgrade linux-image-4.4.0-98-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-135-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenial | Oct 31, 2017 | Sep 15, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 15, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub