An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. There is an out-of-bounds read or a divide-by-zero error for an incorrect user_block_count in a corrupted f2fs image, leading to a denial of service (BUG).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 3, 2018 |
| Suse | — | Upgrade kernel-default | Oct 18, 2018 | Jul 3, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-aws-hweUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-58-lowlatency | Apr 9, 2019 | Jul 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub