An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service (out-of-bounds memory access and BUG) can occur upon encountering an abnormal bitmap size when mounting a crafted f2fs image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 18, 2019 | Jul 3, 2018 |
| Suse | — | Upgrade kernel-default | Oct 18, 2018 | Jul 3, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-4.4.0-139-genericUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1072-awsUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-genericUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-4.4.0-1034-awsUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oemUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-1055-azure | Nov 23, 2018 | Jul 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub