In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles ATTR_REPLACE operations with conversion of an attr from short to long form.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Oct 26, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Dec 31, 2018 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel | Feb 15, 2019 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade perf | Feb 15, 2019 | Oct 26, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 7, 2018 | Mar 15, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 13, 2018 | Oct 26, 2018 |
| Suse | — | Upgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-extraUpgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2 | Nov 10, 2018 | Oct 26, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-141-powerpc64-smpUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-4.4.0-1037-awsUpgrade linux-image-genericUpgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-gcpUpgrade linux-image-4.4.0-141-powerpc-smpUpgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1106-snapdragonUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1036-azureUpgrade linux-image-4.4.0-141-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-4.4.0-1074-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-4.4.0-141-generic-lpaeUpgrade linux-image-4.4.0-141-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-141-powerpc-e500mcUpgrade linux-image-3.13.0-164-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1102-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-4.4.0-1039-kvmUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-141-lowlatencyUpgrade linux-image-awsUpgrade linux-image-oem | Jan 11, 2019 | Oct 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub