In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving a crafted filesystem that stores the system.data extended attribute value in a dedicated inode.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perf | Apr 27, 2020 | May 24, 2018 |
| Amazon_linux | — | Upgrade kernel | Jul 26, 2018 | May 24, 2018 |
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | May 24, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2018 |
| Redhat_linux | — | Upgrade kernel | Mar 14, 2019 | May 24, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1020-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1022-azureUpgrade linux-image-4.15.0-1021-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-1017-oemUpgrade linux-image-kvmUpgrade linux-image-4.15.0-33-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-33-genericUpgrade linux-image-4.15.0-33-lowlatencyUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1020-kvmUpgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-4.15.0-33-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-azure-edgeUpgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-4.15.0-1018-gcp | Aug 31, 2018 | May 24, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub