PT-2018-11596 · Linux+5 · Linux Kernel+5

Wen Xu

·

Publicado

2018-07-03

·

Atualizado

2021-02-02

·

CVE-2018-13093

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17.4
Description A NULL pointer dereference and panic can occur in the lookup slow() function when doing pathwalks on a corrupted xfs image. This issue arises due to a lack of proper validation that cached inodes are free during allocation.
Recommendations For Linux kernel versions prior to 4.17.4, update to version 4.17.4 or later to resolve the issue.

Correção

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2018-1971
ALT-PU-2018-1976
ALT-PU-2019-1433
CESA-2019_2029
CVE-2018-13093
DLA-1529-1
DLA-2114-1
OPENSUSE-SU-2018_2738-1
OPENSUSE-SU-2018_3071-1
RHSA-2019:2029
RHSA-2019:2043
RHSA-2019_2029
RHSA-2019_2043
SUSE-SU-2018:2775-1
SUSE-SU-2018:2776-1
SUSE-SU-2018:2858-1
SUSE-SU-2018:2862-1
SUSE-SU-2018:2908-1
SUSE-SU-2018:2908-2
SUSE-SU-2018:2980-1
SUSE-SU-2018:2981-1
SUSE-SU-2018:3083-1
SUSE-SU-2018:3084-1
SUSE-SU-2018:3961-1
USN-4094-1
USN-4118-1
USN-4708-1
USN-4709-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu