A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | Jul 27, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel | May 1, 2019 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-libs | May 30, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 1, 2019 | Jun 14, 2018 |
| Redhat_linux | — | Upgrade kernel | Oct 31, 2018 | Jul 27, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docs-azureUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade cluster-md-kmp-defaultUpgrade kernel-docs | Aug 18, 2018 | Jul 27, 2018 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-4.4.0-1099-snapdragonUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-134-lowlatencyUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-134-powerpc-e500mcUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-134-powerpc64-embUpgrade linux-image-4.4.0-134-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.4.0-134-genericUpgrade linux-image-4.4.0-1028-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1032-kvmUpgrade linux-image-awsUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1066-awsUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-134-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1095-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-4.4.0-134-powerpc64-smpUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-kvmUpgrade linux-image-4.15.0-44-lowlatency | Sep 6, 2018 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub