An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service (out-of-bounds memory access and BUG) can occur upon encountering an abnormal bitmap size when mounting a crafted f2fs image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 18, 2019 | Jul 3, 2018 |
| Suse | — | Upgrade kernel-default | Oct 18, 2018 | Jul 3, 2018 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-gke-4.15Upgrade linux-image-awsUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-oemUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1072-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-1034-awsUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-gcpUpgrade linux-image-4.4.0-139-genericUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.15.0-1047-aws | Nov 23, 2018 | Jul 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub