A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Jul 26, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debug | Dec 31, 2018 | Jul 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools | Mar 27, 2019 | Jul 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Feb 15, 2019 | Jul 26, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 6, 2018 | May 28, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 31, 2018 | Jul 26, 2018 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-docs-azureUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2 | Aug 18, 2018 | Jul 26, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1037-azureUpgrade linux-image-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-134-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1095-raspi2Upgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1066-awsUpgrade linux-image-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.4.0-1099-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-134-genericUpgrade linux-image-4.4.0-134-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.4.0-134-powerpc-e500mcUpgrade linux-image-4.4.0-134-powerpc-smpUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-134-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.4.0-1028-awsUpgrade linux-image-4.4.0-134-lowlatencyUpgrade linux-image-4.4.0-1032-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04 | Sep 6, 2018 | Jul 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub