An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 2, 2018 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libs | Dec 18, 2019 | Jul 27, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 27, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-source-azure | Sep 27, 2018 | Jul 27, 2018 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-genericUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1055-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-4.4.0-139-genericUpgrade linux-image-4.4.0-1034-awsUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-4.4.0-1072-awsUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-powerpc64-emb-lts-xenial | Nov 23, 2018 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub