vulnerability
Ubuntu: (Multiple Advisories) (CVE-2017-14340): Linux kernel vulnerabilities
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
5 | (AV:L/AC:L/Au:N/C:N/I:N/A:C) | 09/15/2017 | 10/31/2017 | 01/23/2025 |
Severity
5
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:C)
Published
09/15/2017
Added
10/31/2017
Modified
01/23/2025
Description
The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via vectors related to setting an RHINHERIT flag on a directory.
Solution(s)
ubuntu-upgrade-linux-image-3-13-0-135-genericubuntu-upgrade-linux-image-3-13-0-135-generic-lpaeubuntu-upgrade-linux-image-3-13-0-135-lowlatencyubuntu-upgrade-linux-image-3-13-0-135-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-135-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-135-powerpc-smpubuntu-upgrade-linux-image-3-13-0-135-powerpc64-embubuntu-upgrade-linux-image-3-13-0-135-powerpc64-smpubuntu-upgrade-linux-image-4-10-0-1008-gcpubuntu-upgrade-linux-image-4-10-0-1020-raspi2ubuntu-upgrade-linux-image-4-10-0-38-genericubuntu-upgrade-linux-image-4-10-0-38-generic-lpaeubuntu-upgrade-linux-image-4-10-0-38-lowlatencyubuntu-upgrade-linux-image-4-4-0-1009-kvmubuntu-upgrade-linux-image-4-4-0-1033-gkeubuntu-upgrade-linux-image-4-4-0-1039-awsubuntu-upgrade-linux-image-4-4-0-1076-raspi2ubuntu-upgrade-linux-image-4-4-0-1078-snapdragonubuntu-upgrade-linux-image-4-4-0-98-genericubuntu-upgrade-linux-image-4-4-0-98-generic-lpaeubuntu-upgrade-linux-image-4-4-0-98-lowlatencyubuntu-upgrade-linux-image-4-4-0-98-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-98-powerpc-smpubuntu-upgrade-linux-image-4-4-0-98-powerpc64-embubuntu-upgrade-linux-image-4-4-0-98-powerpc64-smpubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon
References
- CVE-2017-14340
- https://attackerkb.com/topics/CVE-2017-14340
- DEBIAN-DSA-3981
- NVD-CVE-2017-14340
- UBUNTU-USN-3190-1
- UBUNTU-USN-3190-2
- UBUNTU-USN-3312-1
- UBUNTU-USN-3312-2
- UBUNTU-USN-3405-1
- UBUNTU-USN-3405-2
- UBUNTU-USN-3414-1
- UBUNTU-USN-3420-1
- UBUNTU-USN-3420-2
- UBUNTU-USN-3468-1
- UBUNTU-USN-3468-2
- UBUNTU-USN-3468-3
- UBUNTU-USN-3469-1
- UBUNTU-USN-3469-2
- UBUNTU-USN-3470-1
- UBUNTU-USN-3470-2

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.