A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | Jul 27, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade perf | May 1, 2019 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo | May 30, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 1, 2019 | Jun 14, 2018 |
| Redhat_linux | — | Upgrade kernel | Oct 31, 2018 | Jul 27, 2018 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-azureUpgrade gfs2-kmp-defaultUpgrade kernel-obs-build | Aug 18, 2018 | Jul 27, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1028-awsUpgrade linux-image-4.4.0-134-genericUpgrade linux-image-4.4.0-134-powerpc-smpUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-4.4.0-1099-snapdragonUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.4.0-134-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-4.4.0-134-powerpc64-embUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-134-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-44-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-134-generic-lpaeUpgrade linux-image-4.4.0-134-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1032-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1033-oemUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1095-raspi2Upgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1066-awsUpgrade linux-image-powerpc64-smp-lts-xenial | Sep 6, 2018 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub