PT-2018-11596 · Linux+5 · Linux Kernel+5

Wen Xu · Published 2018-07-03 · Updated 2021-02-02 · CVE-2018-13093

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17.4

Description A NULL pointer dereference and panic can occur in the lookup slow() function when doing pathwalks on a corrupted xfs image. This issue arises due to a lack of proper validation that cached inodes are free during allocation.

Recommendations For Linux kernel versions prior to 4.17.4, update to version 4.17.4 or later to resolve the issue.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2018-1971

ALT-PU-2018-1976

ALT-PU-2019-1433

CESA-2019_2029

CVE-2018-13093

DLA-1529-1

DLA-2114-1

OPENSUSE-SU-2018_2738-1

OPENSUSE-SU-2018_3071-1

RHSA-2019:2029

RHSA-2019:2043

RHSA-2019_2029

RHSA-2019_2043

SUSE-SU-2018:2775-1

SUSE-SU-2018:2776-1

SUSE-SU-2018:2858-1

SUSE-SU-2018:2862-1

SUSE-SU-2018:2908-1

SUSE-SU-2018:2908-2

SUSE-SU-2018:2980-1

SUSE-SU-2018:2981-1

SUSE-SU-2018:3083-1

SUSE-SU-2018:3084-1

SUSE-SU-2018:3961-1

USN-4094-1

USN-4118-1

USN-4708-1

USN-4709-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 576

• https://github.com/torvalds/linux/commit/afca6c5b2595fc44383919fba740c194b0b76aff · Patch
• https://ubuntu.com/security/CVE-2019-11085 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-13093 · Security Note
• https://ubuntu.com/security/CVE-2019-1125 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3900 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-10126 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15214 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13099 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-11884 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4118-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14609 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14617 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13053 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15212 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2858-1 · Vendor Advisory