An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image, because of a lack of verification that each block group has a corresponding chunk at mount time, within btrfs_read_block_groups in fs/btrfs/extent-tree.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | May 26, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-58-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-oemUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-1079-aws | Apr 9, 2019 | Jul 27, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub