An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 2, 2018 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel | Dec 18, 2019 | Jul 27, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 27, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-obs-build | Sep 27, 2018 | Jul 27, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1055-azureUpgrade linux-image-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-4.4.0-1072-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1034-awsUpgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-oracleUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gke-4.15Upgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-4.4.0-139-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-aws | Nov 23, 2018 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub