A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Jul 26, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-devel | Apr 2, 2019 | Jul 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel | May 1, 2019 | Jul 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perf | Sep 12, 2019 | Jul 26, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 6, 2018 | Jun 8, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 31, 2018 | Jul 26, 2018 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-azureUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-extra | Aug 18, 2018 | Jul 26, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1037-azureUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-4.4.0-134-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1066-awsUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-4.4.0-134-powerpc64-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.4.0-1095-raspi2Upgrade linux-image-4.4.0-1099-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-134-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-134-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.4.0-134-powerpc-e500mcUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1028-awsUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.4.0-1032-kvmUpgrade linux-image-4.4.0-134-genericUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-134-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-powerpc64-smp | Sep 6, 2018 | Jul 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub