The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image.
CVSS Details
- CVSS 3.0 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 27, 2017 | Feb 6, 2017 |
| Debian | — | Upgrade linux | Feb 25, 2019 | Feb 6, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Nov 30, 2017 | Feb 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debuginfo | Nov 30, 2017 | Feb 6, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 14, 2017 | Nov 15, 2016 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 27, 2017 | Feb 6, 2017 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-ec2-devel | Apr 5, 2017 | Feb 6, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-4.4.0-67-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-awsUpgrade linux-image-4.4.0-67-powerpc64-smpUpgrade linux-image-4.4.0-67-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-67-powerpc-e500mcUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1051-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1006-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-67-lowlatencyUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1048-raspi2Upgrade linux-image-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-4.4.0-67-genericUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.4.0-1009-awsUpgrade linux-image-4.4.0-67-powerpc-smpUpgrade linux-image-powerpc64-smp | Mar 18, 2017 | Feb 6, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub