An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image, because of a lack of chunk block group mapping validation in btrfs_read_block_groups in fs/btrfs/extent-tree.c, and a lack of empty-tree checks in check_leaf in fs/btrfs/tree-checker.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | May 26, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 27, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-145-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-aws-hweUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.15.0-1055-azureUpgrade linux-image-oemUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-145-powerpc64-smp | Apr 9, 2019 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub