The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc32c checksum driver, which allows attackers to cause a denial of service (ext4_xattr_inode_hash NULL pointer dereference and system crash) via a crafted ext4 image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Apr 2, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Apr 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-headersUpgrade kernel-tools-libs | Apr 2, 2019 | Apr 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-libs | Mar 11, 2019 | Apr 1, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 6, 2018 | Mar 22, 2018 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 31, 2018 | Apr 1, 2018 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-default-manUpgrade kernel-ec2Upgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-devel-azure | Jun 21, 2018 | Apr 1, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1012-kvmUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.15.0-1013-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1014-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1011-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-24-snapdragonUpgrade linux-image-4.15.0-24-generic-lpaeUpgrade linux-image-4.15.0-24-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-4.15.0-1010-gcpUpgrade linux-image-4.15.0-24-generic | Jul 4, 2018 | Apr 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub