A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Jul 30, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 30, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 20, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debugUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-headers | Apr 2, 2019 | Jul 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | May 1, 2019 | Jul 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade perf | Sep 12, 2019 | Jul 30, 2018 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2018 | Jun 14, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 31, 2018 | Jul 30, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docs-azureUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2Upgrade cluster-network-kmp-default | Aug 18, 2018 | Jul 30, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1032-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.4.0-1038-awsUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-powerpc-smp | Feb 5, 2019 | Jul 30, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2018 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub