vulnerability
Ubuntu: (Multiple Advisories) (CVE-2017-18249): Linux kernel vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:S/C:C/I:C/A:C) | Mar 26, 2018 | Apr 9, 2019 | Jan 28, 2025 |
Severity
7
CVSS
(AV:L/AC:M/Au:S/C:C/I:C/A:C)
Published
Mar 26, 2018
Added
Apr 9, 2019
Modified
Jan 28, 2025
Description
The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service (race condition) or possibly have unspecified other impact via concurrent threads.
Solution(s)
ubuntu-upgrade-linux-image-4-4-0-1040-awsubuntu-upgrade-linux-image-4-4-0-1043-kvmubuntu-upgrade-linux-image-4-4-0-1079-awsubuntu-upgrade-linux-image-4-4-0-1106-raspi2ubuntu-upgrade-linux-image-4-4-0-1110-snapdragonubuntu-upgrade-linux-image-4-4-0-144-genericubuntu-upgrade-linux-image-4-4-0-144-generic-lpaeubuntu-upgrade-linux-image-4-4-0-144-lowlatencyubuntu-upgrade-linux-image-4-4-0-144-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-144-powerpc-smpubuntu-upgrade-linux-image-4-4-0-144-powerpc64-embubuntu-upgrade-linux-image-4-4-0-144-powerpc64-smpubuntu-upgrade-linux-image-4-4-0-145-genericubuntu-upgrade-linux-image-4-4-0-145-generic-lpaeubuntu-upgrade-linux-image-4-4-0-145-lowlatencyubuntu-upgrade-linux-image-4-4-0-145-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-145-powerpc-smpubuntu-upgrade-linux-image-4-4-0-145-powerpc64-embubuntu-upgrade-linux-image-4-4-0-145-powerpc64-smpubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-lts-xenial
References
- CVE-2017-18249
- https://attackerkb.com/topics/CVE-2017-18249
- NVD-CVE-2017-18249
- UBUNTU-USN-3930-1
- UBUNTU-USN-3930-2
- UBUNTU-USN-3931-1
- UBUNTU-USN-3931-2
- UBUNTU-USN-3932-1
- UBUNTU-USN-3932-2
- UBUNTU-USN-3933-1
- UBUNTU-USN-3933-2
- UBUNTU-USN-3980-1
- UBUNTU-USN-3980-2
- UBUNTU-USN-3981-1
- UBUNTU-USN-3981-2
- UBUNTU-USN-4094-1
- UBUNTU-USN-4115-1
- UBUNTU-USN-4118-1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.