An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-devel | Apr 27, 2020 | Jul 3, 2018 |
| Amazon_linux | — | Upgrade kernel | Aug 7, 2018 | Jul 3, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Jul 3, 2018 |
| Debian | — | Upgrade linux | Feb 19, 2019 | Jul 3, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-devel | Jun 17, 2020 | Jul 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo | Apr 30, 2021 | Jul 3, 2018 |
| Oracle_linux | — | Upgrade kernel | Aug 15, 2019 | Apr 12, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 7, 2019 | Jul 3, 2018 |
| Suse | — | Upgrade kernel-docs-azureUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-default | Sep 17, 2018 | Jul 3, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-201-generic-lpaeUpgrade linux-image-4.4.0-201-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-201-powerpc64-embUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-4.4.0-201-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.4.0-201-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-1087-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-1145-raspi2Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.4.0-201-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1085-awsUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-4.4.0-1149-snapdragonUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.4.0-201-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04 | Aug 14, 2019 | Jul 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub