The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc32c checksum driver, which allows attackers to cause a denial of service (ext4_xattr_inode_hash NULL pointer dereference and system crash) via a crafted ext4 image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Apr 2, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Apr 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-devel | Apr 2, 2019 | Apr 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perf | Mar 11, 2019 | Apr 1, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 6, 2018 | Mar 22, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Oct 31, 2018 | Apr 1, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade kernel-default-manUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-ec2 | Jun 21, 2018 | Apr 1, 2018 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-4.15.0-1014-azureUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-genericUpgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-4.15.0-24-genericUpgrade linux-image-kvmUpgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1011-awsUpgrade linux-image-snapdragon | Jul 4, 2018 | Apr 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub