Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | Jul 25, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 25, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perfUpgrade kernel-headers | Dec 4, 2019 | Jul 25, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libs | Apr 30, 2021 | Jul 25, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf | Feb 15, 2019 | Jul 25, 2018 |
| Redhat_linux | — | Upgrade kernel | Oct 31, 2018 | Jul 25, 2018 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-azureUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-obs-build | Aug 18, 2018 | Jul 25, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1034-awsUpgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-4.4.0-1072-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-139-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-4.4.0-139-generic-lpae | Nov 23, 2018 | Jul 25, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 25, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub