The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero i_links_count, which allows attackers to cause a denial of service (ext4_process_freed_data NULL pointer dereference and OOPS) via a crafted ext4 image.
http://openwall.com/lists/oss-security/2018/03/29/1
https://access.redhat.com/errata/RHSA-2018:2948
https://access.redhat.com/errata/RHSA-2018:3083
https://access.redhat.com/errata/RHSA-2018:3096
https://bugzilla.kernel.org/show_bug.cgi?id=199179
https://bugzilla.kernel.org/show_bug.cgi?id=199275
https://bugzilla.redhat.com/show_bug.cgi?id=1560777
https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
https://usn.ubuntu.com/3676-1/
https://usn.ubuntu.com/3676-2/
https://usn.ubuntu.com/3677-1/
https://usn.ubuntu.com/3677-2/
https://usn.ubuntu.com/3678-1/
https://usn.ubuntu.com/3678-2/
https://usn.ubuntu.com/3678-3/
https://usn.ubuntu.com/3678-4/
https://usn.ubuntu.com/3754-1/
Source: MITRE
Published: 2018-04-02
Updated: 2018-10-31
Type: CWE-476
Base Score: 7.1
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Impact Score: 6.9
Exploitability Score: 8.6
Severity: HIGH
Base Score: 5.5
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
OR
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 4.15.15 (inclusive)
ID | Name | Product | Family | Severity |
---|---|---|---|---|
124830 | EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1507) | Nessus | Huawei Local Security Checks | high |
124800 | EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1476) | Nessus | Huawei Local Security Checks | high |
123697 | EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1229) | Nessus | Huawei Local Security Checks | high |
123226 | openSUSE Security Update : the Linux Kernel (openSUSE-2019-536) (Spectre) | Nessus | SuSE Local Security Checks | high |
122699 | EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1076) | Nessus | Huawei Local Security Checks | medium |
121942 | Photon OS 2.0: Linux PHSA-2018-2.0-0041 | Nessus | PhotonOS Local Security Checks | high |
121837 | Photon OS 1.0: Linux PHSA-2018-1.0-0132 | Nessus | PhotonOS Local Security Checks | high |
121605 | OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0002) | Nessus | OracleVM Local Security Checks | high |
120977 | Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4316) | Nessus | Oracle Linux Local Security Checks | high |
120976 | Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4315) | Nessus | Oracle Linux Local Security Checks | high |
120067 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:2092-1) (Spectre) | Nessus | SuSE Local Security Checks | high |
119921 | EulerOS 2.0 SP2 : kernel (EulerOS-SA-2018-1432) | Nessus | Huawei Local Security Checks | high |
119187 | Scientific Linux Security Update : kernel on SL7.x x86_64 (20181030) | Nessus | Scientific Linux Local Security Checks | high |
118990 | CentOS 7 : kernel (CESA-2018:3083) | Nessus | CentOS Local Security Checks | high |
118770 | Oracle Linux 7 : kernel (ELSA-2018-3083) | Nessus | Oracle Linux Local Security Checks | high |
118528 | RHEL 7 : kernel-rt (RHSA-2018:3096) | Nessus | Red Hat Local Security Checks | high |
118525 | RHEL 7 : kernel (RHSA-2018:3083) | Nessus | Red Hat Local Security Checks | high |
118513 | RHEL 7 : kernel-alt (RHSA-2018:2948) (Spectre) | Nessus | Red Hat Local Security Checks | high |
118272 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1855-2) | Nessus | SuSE Local Security Checks | high |
112113 | Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3754-1) | Nessus | Ubuntu Local Security Checks | high |
111934 | Photon OS 1.0: Linux / Rsync PHSA-2018-1.0-0132 (deprecated) | Nessus | PhotonOS Local Security Checks | high |
111414 | openSUSE Security Update : the Linux Kernel (openSUSE-2018-762) (Spectre) | Nessus | SuSE Local Security Checks | high |
111300 | Photon OS 2.0 : ceph / linux-esx / rsync / linux / linux-secure / linux-aws (PhotonOS-PHSA-2018-2.0-0041) (deprecated) | Nessus | PhotonOS Local Security Checks | high |
110838 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1855-1) | Nessus | SuSE Local Security Checks | high |
110658 | openSUSE Security Update : the Linux Kernel (openSUSE-2018-656) (Spectre) | Nessus | SuSE Local Security Checks | high |
110637 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1762-1) | Nessus | SuSE Local Security Checks | high |
110636 | SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1761-1) | Nessus | SuSE Local Security Checks | high |
110550 | Ubuntu 18.04 LTS : Linux kernel (Raspberry Pi 2) vulnerabilities (USN-3678-4) | Nessus | Ubuntu Local Security Checks | high |
110513 | Ubuntu 18.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3678-3) | Nessus | Ubuntu Local Security Checks | high |
110481 | Ubuntu 16.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3678-2) | Nessus | Ubuntu Local Security Checks | high |
110480 | Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3678-1) | Nessus | Ubuntu Local Security Checks | high |
110479 | Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3677-2) | Nessus | Ubuntu Local Security Checks | high |
110478 | Ubuntu 17.10 : Linux kernel vulnerabilities (USN-3677-1) | Nessus | Ubuntu Local Security Checks | high |
110477 | Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3676-2) | Nessus | Ubuntu Local Security Checks | high |
110476 | Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3676-1) | Nessus | Ubuntu Local Security Checks | high |
109948 | Slackware 14.2 : Slackware 14.2 kernel (SSA:2018-142-01) | Nessus | Slackware Local Security Checks | high |
109531 | Debian DLA-1369-1 : linux security update (Spectre) | Nessus | Debian Local Security Checks | critical |
109518 | Debian DSA-4188-1 : linux - security update (Spectre) | Nessus | Debian Local Security Checks | high |
109517 | Debian DSA-4187-1 : linux - security update (Spectre) | Nessus | Debian Local Security Checks | critical |