An issue was discovered in fs/f2fs/inode.c in the Linux kernel through 4.17.3. A denial of service (slab out-of-bounds read and BUG) can occur for a modified f2fs filesystem image in which FI_EXTRA_ATTR is set in an inode.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2018 |
| Suse | — | Upgrade kernel-default | Oct 18, 2018 | Jul 3, 2018 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.15.0-1047-aws | Aug 14, 2019 | Jul 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub