An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfo | Apr 27, 2020 | Jul 3, 2018 |
| Amazon_linux | — | Upgrade kernel | Aug 7, 2018 | Jul 3, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Jul 3, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 3, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade perf | Jun 17, 2020 | Jul 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo | Apr 30, 2021 | Jul 3, 2018 |
| Oracle_linux | — | Upgrade kernel | Aug 15, 2019 | Apr 12, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 7, 2019 | Jul 3, 2018 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-docs-azure | Sep 17, 2018 | Jul 3, 2018 |
| Ubuntu | — | Upgrade linux-image-snapdragonUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-201-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.4.0-201-powerpc-e500mcUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.4.0-1145-raspi2Upgrade linux-image-4.4.0-1149-snapdragonUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.4.0-1085-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.4.0-201-powerpc64-embUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-201-lowlatencyUpgrade linux-image-4.4.0-201-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-4.4.0-1087-kvmUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gke-4.15Upgrade linux-image-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.4.0-201-powerpc-smpUpgrade linux-image-4.4.0-201-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenial | Aug 14, 2019 | Jul 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub