An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secs_per_zone in a corrupted f2fs image, as demonstrated by a divide-by-zero error.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 3, 2018 |
| Suse | — | Upgrade kernel-default | Oct 18, 2018 | Jul 3, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-aws-hweUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-kvmUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-azureUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-genericUpgrade linux-image-powerpc64-emb-lts-xenial | Apr 9, 2019 | Jul 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub