In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setxattr twice with two different extended attribute names on the same file. This vulnerability can be triggered by an unprivileged user with the ability to create files and execute programs. A kmalloc call is incorrect, leading to slab-out-of-bounds in jfs_xattr.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 19, 2019 | Jun 12, 2018 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-default | Jun 21, 2018 | Jun 12, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-134-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1095-raspi2Upgrade linux-image-4.4.0-1066-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-4.15.0-1022-azureUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-4.15.0-1018-gcpUpgrade linux-image-genericUpgrade linux-image-4.15.0-33-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-4.4.0-1028-awsUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-4.15.0-1020-awsUpgrade linux-image-4.15.0-1020-kvmUpgrade linux-image-4.15.0-1021-raspi2Upgrade linux-image-4.15.0-33-genericUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1099-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-134-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-134-genericUpgrade linux-image-azure-edgeUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-4.4.0-134-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-134-powerpc64-embUpgrade linux-image-4.15.0-33-lowlatencyUpgrade linux-image-4.4.0-134-powerpc-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1032-kvmUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1017-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-33-generic-lpaeUpgrade linux-image-4.4.0-134-lowlatency | Aug 31, 2018 | Jun 12, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub