The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero i_links_count, which allows attackers to cause a denial of service (ext4_process_freed_data NULL pointer dereference and OOPS) via a crafted ext4 image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Apr 2, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | Apr 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Dec 31, 2018 | Apr 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Mar 11, 2019 | Apr 1, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 6, 2018 | Mar 22, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Oct 31, 2018 | Apr 1, 2018 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-default | Jun 21, 2018 | Apr 1, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-128-powerpc64-embUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.13.0-45-genericUpgrade linux-image-4.4.0-128-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1027-kvmUpgrade linux-image-4.15.0-1010-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1091-raspi2Upgrade linux-image-4.15.0-1011-kvmUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.13.0-1030-oemUpgrade linux-image-4.13.0-1022-raspi2Upgrade linux-image-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.13.0-45-lowlatencyUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-4.4.0-128-powerpc64-smpUpgrade linux-image-4.15.0-23-lowlatencyUpgrade linux-image-4.15.0-23-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1009-gcpUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-4.4.0-1023-awsUpgrade linux-image-4.15.0-23-genericUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-4.15.0-23-snapdragonUpgrade linux-image-4.4.0-128-generic-lpaeUpgrade linux-image-4.4.0-128-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-128-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-4.4.0-1094-snapdragonUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-4.4.0-128-lowlatencyUpgrade linux-image-4.13.0-45-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1012-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-4.13.0-1019-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1013-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-157-powerpc64-emb | Jun 13, 2018 | Apr 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub