The __get_data_block function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow and loop) via crafted use of the open and fallocate system calls with an FS_IOC_FIEMAP ioctl.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 2, 2018 | Apr 4, 2018 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-default | Apr 24, 2018 | Apr 4, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-130-genericUpgrade linux-image-4.4.0-1092-raspi2Upgrade linux-image-4.4.0-130-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-130-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-4.4.0-130-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-130-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.4.0-1029-kvmUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1095-snapdragonUpgrade linux-image-4.4.0-1024-awsUpgrade linux-image-4.4.0-130-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-130-powerpc-smp | Jul 5, 2018 | Apr 4, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub