A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Jul 26, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf | Apr 2, 2019 | Jul 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-devel | May 1, 2019 | Jul 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 12, 2019 | Jul 26, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 6, 2018 | Jun 8, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 31, 2018 | Jul 26, 2018 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade gfs2-kmp-defaultUpgrade kernel-docs-azure | Aug 18, 2018 | Jul 26, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-4.4.0-134-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1095-raspi2Upgrade linux-image-awsUpgrade linux-image-4.4.0-1099-snapdragonUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-134-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1066-awsUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-oemUpgrade linux-image-4.4.0-1028-awsUpgrade linux-image-4.4.0-1032-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.4.0-134-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-4.4.0-134-powerpc-e500mcUpgrade linux-image-4.4.0-134-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.4.0-134-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-134-generic | Sep 6, 2018 | Jul 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub