A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Jul 30, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 30, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 20, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Apr 2, 2019 | Jul 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo | May 1, 2019 | Jul 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headers | Sep 12, 2019 | Jul 30, 2018 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2018 | Jun 14, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 31, 2018 | Jul 30, 2018 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-docs-azureUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-default | Aug 18, 2018 | Jul 30, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-44-genericUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-4.4.0-1038-awsUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-4.15.0-1033-oem | Feb 5, 2019 | Jul 30, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2018 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub