PT-2018-11486 · Linux+1 · Linux Kernel+1

Sergej Schumilo · Published 2018-06-28 · Updated 2026-05-26 · CVE-2018-12928

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel version 4.15.0

Description A NULL pointer dereference issue was found in the hfs ext read extent function within the hfs.ko module. This issue can be triggered when mounting a specially crafted hfs filesystem.

Recommendations For Linux kernel version 4.15.0, consider disabling the hfs.ko module to prevent the exploitation of this issue until a patch is available.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2018-12928

ECHO-30B2-8624-81CA

Affected Products

Debian

Linux Kernel

References · 18

• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2018-12928 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-20480.html · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2018-12928 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2018-12928 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-12928 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2018-12928 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-12928 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-12928 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-12928 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12928 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-12928 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-12928 · Security Note
• https://groups.google.com/forum/#!msg/syzkaller-bugs/9SgQk_6tSZ4/zLhTm4r1AwAJ · Note
• http://securityfocus.com/bid/104593 · Note