A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Jul 30, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 30, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 20, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfo | Apr 2, 2019 | Jul 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-devel | May 1, 2019 | Jul 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headers | Sep 12, 2019 | Jul 30, 2018 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2018 | Jun 14, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 31, 2018 | Jul 30, 2018 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docs-azureUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade cluster-md-kmp-defaultUpgrade kernel-docs | Aug 18, 2018 | Jul 30, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-genericUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.4.0-1038-awsUpgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-generic-lpae-lts-xenial | Feb 5, 2019 | Jul 30, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub