An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 2, 2018 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-devel | Dec 18, 2019 | Jul 27, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 27, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-obs-build | Sep 27, 2018 | Jul 27, 2018 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-4.4.0-139-genericUpgrade linux-image-4.4.0-1034-awsUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1072-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-gkeUpgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-gcp | Nov 23, 2018 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub