An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image, because of a lack of chunk block group mapping validation in btrfs_read_block_groups in fs/btrfs/extent-tree.c, and a lack of empty-tree checks in check_leaf in fs/btrfs/tree-checker.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | May 26, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 27, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-aws | Apr 9, 2019 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub