An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in try_merge_free_space() when mounting a crafted btrfs image, because of a lack of chunk type flag checks in btrfs_check_chunk_valid in fs/btrfs/volumes.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | May 26, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-gcpUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-virtualUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-genericUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gke-4.15 | Apr 9, 2019 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub