An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service (out-of-bounds memory access and BUG) can occur for a modified f2fs filesystem image in which an inline inode contains an invalid reserved blkaddr.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 2, 2018 | Jul 3, 2018 |
| Suse | — | Upgrade kernel-default | Oct 18, 2018 | Jul 3, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-genericUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-azureUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-generic-lpae-lts-xenial | Apr 9, 2019 | Jul 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub