The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Apr 24, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 24, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade perf | Dec 4, 2019 | Apr 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Apr 30, 2021 | Apr 24, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-headers | Mar 11, 2019 | Apr 24, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 6, 2018 | Apr 12, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 31, 2018 | Apr 24, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1081-awsUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-193-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-4.15.0-121-genericUpgrade linux-image-4.15.0-1098-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1082-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-193-powerpc-e500mcUpgrade linux-image-4.4.0-193-powerpc64-embUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-4.4.0-193-genericUpgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1145-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-4.4.0-1117-awsUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-4.4.0-193-powerpc-smpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-193-generic-lpaeUpgrade linux-image-4.4.0-1141-raspi2Upgrade linux-image-4.15.0-1099-azureUpgrade linux-image-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-193-powerpc64-smpUpgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-4.15.0-1085-awsUpgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-generic | Oct 14, 2020 | Apr 24, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 24, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub