An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in try_merge_free_space() when mounting a crafted btrfs image, because of a lack of chunk type flag checks in btrfs_check_chunk_valid in fs/btrfs/volumes.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | May 26, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-oracleUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-gke-4.15Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-kvmUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.15.0-58-generic-lpae | Apr 9, 2019 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub