An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image, because of a lack of chunk block group mapping validation in btrfs_read_block_groups in fs/btrfs/extent-tree.c, and a lack of empty-tree checks in check_leaf in fs/btrfs/tree-checker.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | May 26, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 27, 2018 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-gcpUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-aws-hweUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.15.0-1040-gke | Apr 9, 2019 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub