In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles ATTR_REPLACE operations with conversion of an attr from short to long form.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Oct 26, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade perfUpgrade kernel-tools | Dec 31, 2018 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade perf | Feb 15, 2019 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-devel | Feb 15, 2019 | Oct 26, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 7, 2018 | Mar 15, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 13, 2018 | Oct 26, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-default | Nov 10, 2018 | Oct 26, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-141-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-141-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-141-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-powerpc-e500Upgrade linux-image-snapdragonUpgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-3.13.0-164-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1074-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-4.4.0-1102-raspi2Upgrade linux-image-4.4.0-141-lowlatencyUpgrade linux-image-azureUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1039-kvmUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-4.4.0-141-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-141-powerpc64-smpUpgrade linux-image-4.4.0-141-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-4.4.0-1106-snapdragonUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.4.0-1037-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-lowlatency | Jan 11, 2019 | Oct 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub