PT-2018-2685 · Linux+5 · Linux Kernel+5
Kanda Motohiro
·
Publicado
2018-04-17
·
Atualizado
2019-10-03
·
CVE-2018-18690
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.17
Description
The issue is related to the xfs attr shortform addname function in the XFS filesystem implementation, which mishandles ATTR REPLACE operations when converting an attribute from short to long form. This can be exploited by a local attacker who can set attributes on an xfs filesystem, potentially making the filesystem non-operational until the next mount. The exploitation of this issue may allow an attacker to cause a denial of service.
Recommendations
For Linux kernel versions prior to 4.17, consider updating to version 4.17 or later to resolve the issue. As a temporary workaround, restrict access to setting attributes on xfs filesystems to minimize the risk of exploitation.
Exploit
Correção
Improper Check for Exceptional Conditions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu