An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscrypt_do_page_crypto() in fs/crypto/crypto.c when operating on a file in a corrupted f2fs image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 27, 2018 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-oemUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-oracleUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-awsUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-virtualUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.4.0-144-generic-lpae | Apr 9, 2019 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub