An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | Jul 3, 2018 |
| Amazon_linux | — | Upgrade kernel | Aug 7, 2018 | Jul 3, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Jul 3, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 3, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-tools | Jun 17, 2020 | Jul 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-headers | Apr 30, 2021 | Jul 3, 2018 |
| Oracle_linux | — | Upgrade kernel | Aug 15, 2019 | Apr 12, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 7, 2019 | Jul 3, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-docs-azure | Sep 17, 2018 | Jul 3, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-201-powerpc64-smpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-201-powerpc-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-4.4.0-1087-kvmUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-201-powerpc64-embUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-201-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.4.0-201-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.4.0-1085-awsUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.4.0-201-genericUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-genericUpgrade linux-image-4.4.0-1145-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1149-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-201-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-snapdragon | Aug 14, 2019 | Jul 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub