The __get_data_block function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow and loop) via crafted use of the open and fallocate system calls with an FS_IOC_FIEMAP ioctl.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 2, 2018 | Apr 4, 2018 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-default | Apr 24, 2018 | Apr 4, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1029-kvmUpgrade linux-image-4.4.0-130-powerpc-smpUpgrade linux-image-4.4.0-1095-snapdragonUpgrade linux-image-4.4.0-130-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-genericUpgrade linux-image-4.4.0-1024-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-130-powerpc-e500mcUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-4.4.0-1092-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-130-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-130-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-4.4.0-130-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-130-powerpc64-emb | Jul 5, 2018 | Apr 4, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub