The ext4_valid_block_bitmap function in fs/ext4/balloc.c in the Linux kernel through 4.15.15 allows attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image because balloc.c and ialloc.c do not validate bitmap block numbers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 2, 2018 | Apr 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade perf | Jun 27, 2019 | Apr 2, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-tools-libs | Sep 25, 2019 | Apr 2, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 27, 2018 | Mar 22, 2018 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extra | Jun 21, 2018 | Apr 1, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-4.4.0-1091-raspi2Upgrade linux-image-4.15.0-33-genericUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-4.15.0-1020-kvmUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-4.15.0-33-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1027-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-128-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-128-powerpc64-embUpgrade linux-image-azureUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-128-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1020-awsUpgrade linux-image-4.15.0-1021-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1018-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1094-snapdragonUpgrade linux-image-4.15.0-33-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-128-powerpc-smpUpgrade linux-image-4.4.0-1023-awsUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-4.15.0-33-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-4.4.0-128-genericUpgrade linux-image-azure-edgeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-4.15.0-1017-oemUpgrade linux-image-4.4.0-128-powerpc64-smpUpgrade linux-image-4.4.0-128-powerpc-e500mcUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-4.15.0-1022-azureUpgrade linux-image-generic-hwe-16.04 | Jun 13, 2018 | Apr 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub