An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image, because of a lack of verification that each block group has a corresponding chunk at mount time, within btrfs_read_block_groups in fs/btrfs/extent-tree.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | May 26, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-kvmUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-aws-hweUpgrade linux-image-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-145-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.4.0-144-generic-lpae | Apr 9, 2019 | Jul 27, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub