A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Jul 26, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Dec 31, 2018 | Jul 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Mar 27, 2019 | Jul 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel | Feb 15, 2019 | Jul 26, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 6, 2018 | Jun 10, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 31, 2018 | Jul 26, 2018 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade kernel-docs-azureUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-default | Aug 18, 2018 | Jul 26, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-33-genericUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-4.4.0-1028-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1020-awsUpgrade linux-image-4.15.0-1018-gcpUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1022-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-134-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1066-awsUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-4.4.0-1095-raspi2Upgrade linux-image-azureUpgrade linux-image-4.15.0-33-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-134-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-33-generic-lpaeUpgrade linux-image-4.4.0-1032-kvmUpgrade linux-image-4.15.0-1021-raspi2Upgrade linux-image-4.15.0-1017-oemUpgrade linux-image-4.4.0-134-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-4.4.0-134-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1020-kvmUpgrade linux-image-4.4.0-1099-snapdragonUpgrade linux-image-4.4.0-134-lowlatencyUpgrade linux-image-4.15.0-33-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-4.4.0-134-genericUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-134-powerpc64-smpUpgrade linux-image-generic-lpae | Aug 31, 2018 | Jul 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub