An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncate_inline_inode() in fs/f2fs/inline.c when umounting an f2fs image, because a length value may be negative.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 27, 2018 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-oemUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gke-4.15Upgrade linux-image-aws | Aug 14, 2019 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub