PT-2018-10555 · Linux+2 · Linux Kernel+2

Jann Horn · Published 2018-05-24 · Updated 2019-03-15 · CVE-2018-11412

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.13 through 4.16.11

Description The issue arises in the Linux kernel when the ext4 read inline data() function in fs/ext4/inline.c performs a memcpy operation with an untrusted length value. This occurs under specific circumstances involving a crafted filesystem where the system.data extended attribute value is stored in a dedicated inode.

Recommendations For Linux kernel versions 4.13 through 4.16.11, consider updating to a version that contains a fix for this issue to prevent potential exploitation.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2018-1817

ALT-PU-2018-1943

ALT-PU-2019-1433

CVE-2018-11412

MGASA-2018-0324

MGASA-2018-0340

MGASA-2018-0341

RHSA-2019:0525

USN-3752-1

USN-3752-2

USN-3752-3

Affected Products

Alt Linux

Linux Kernel

Ubuntu

References · 68

• 🔥 https://exploit-db.com/exploits/44832 · Exploit
• 🔥 https://bugs.chromium.org/p/project-zero/issues/detail?id=1580 · Exploit
• 🔥 https://bugzilla.kernel.org/show_bug.cgi?id=199803 · Exploit
• https://ubuntu.com/security/CVE-2018-10323 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3752-2 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-11412 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-11412 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-11412 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1120 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0324 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3752-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3752-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13094 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0340.html · Security Note
• https://ubuntu.com/security/CVE-2018-1093 · Vendor Advisory