The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Apr 24, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 24, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-devel | Dec 4, 2019 | Apr 24, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf | Apr 30, 2021 | Apr 24, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade kernel-devel | Mar 11, 2019 | Apr 24, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 6, 2018 | Apr 12, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 31, 2018 | Apr 24, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1085-awsUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-gke-4.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-4.4.0-193-generic-lpaeUpgrade linux-image-4.4.0-1117-awsUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-4.4.0-193-powerpc-smpUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1141-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-4.4.0-193-powerpc64-smpUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-4.4.0-1145-snapdragonUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1081-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-4.4.0-1082-kvmUpgrade linux-image-4.15.0-121-genericUpgrade linux-image-4.4.0-193-genericUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-4.4.0-193-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-193-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-193-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1098-azure | Oct 14, 2020 | Apr 24, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 24, 2018 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub