In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles ATTR_REPLACE operations with conversion of an attr from short to long form.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Oct 26, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debuginfo | Dec 31, 2018 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-devel | Feb 15, 2019 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade perf | Feb 15, 2019 | Oct 26, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 7, 2018 | Mar 15, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 13, 2018 | Oct 26, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2 | Nov 10, 2018 | Oct 26, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-4.4.0-141-genericUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-4.4.0-141-powerpc-e500mcUpgrade linux-image-4.4.0-1039-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-powerpc-e500Upgrade linux-image-oemUpgrade linux-image-4.4.0-1074-awsUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1102-raspi2Upgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-141-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-164-genericUpgrade linux-image-4.4.0-141-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-genericUpgrade linux-image-4.4.0-1037-awsUpgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-4.15.0-1031-awsUpgrade linux-image-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-4.4.0-141-powerpc64-smpUpgrade linux-image-4.4.0-141-powerpc-smpUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-4.4.0-141-powerpc64-embUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1106-snapdragonUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-lowlatency | Jan 11, 2019 | Oct 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub