An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 2, 2018 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perf | Dec 18, 2019 | Jul 27, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 27, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-obs-build | Sep 27, 2018 | Jul 27, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-aws-hweUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1072-awsUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-4.15.0-58-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-4.4.0-1034-awsUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-139-generic | Nov 23, 2018 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub