PT-2018-11486 · Linux+1 · Linux Kernel+1

Sergej Schumilo · Publicado 2018-06-28 · Atualizado 2026-05-26 · CVE-2018-12928

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel version 4.15.0

Description A NULL pointer dereference issue was found in the hfs ext read extent function within the hfs.ko module. This issue can be triggered when mounting a specially crafted hfs filesystem.

Recommendations For Linux kernel version 4.15.0, consider disabling the hfs.ko module to prevent the exploitation of this issue until a patch is available.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2018-12928

ECHO-30B2-8624-81CA

Produtos afetados

Debian

Linux Kernel

Referências · 18

• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2018-12928 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2025-20480.html · Aviso do Fabricante
• https://groups.google.com/forum/#!msg/syzkaller-bugs/9SgQk_6tSZ4/zLhTm4r1AwAJ · Nota
• http://securityfocus.com/bid/104593 · Nota
• https://marc.info/?l=linux-fsdevel&m=152407263325766&w=2 · Nota
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2018-12928 · Aviso do Fabricante
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2018-12928 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-12928 · Aviso do Fabricante
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2018-12928 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-12928 · Aviso do Fabricante
• https://lore.kernel.org/linux-fsdevel/[e-mail] · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-12928 · Aviso do Fabricante
• https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1763384 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-12928 · Aviso do Fabricante