An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscrypt_do_page_crypto() in fs/crypto/crypto.c when operating on a file in a corrupted f2fs image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 27, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-145-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.15.0-1047-aws | Apr 9, 2019 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub