Published: 03/07/2018 Updated: 06/08/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

An issue exists in fs/xfs/xfs_icache.c in the Linux kernel up to and including 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

Several security issues were fixed in the Linux kernel ...

An issue was discovered in the XFS filesystem in fs/xfs/libxfs/xfs_attr_leafc in the Linux kernel A NULL pointer dereference may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp This can lead to a system crash and a denial of service(CVE-2018-13094) An issue was discovered in the XFS filesystem in fs/xfs/xfs_ ...

CWE-476 https://github.com/torvalds/linux/commit/afca6c5b2595fc44383919fba740c194b0b76aff https://bugzilla.kernel.org/show_bug.cgi?id=199367 https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next&id=afca6c5b2595fc44383919fba740c194b0b76aff https://access.redhat.com/errata/RHSA-2019:2043 https://access.redhat.com/errata/RHSA-2019:2029 https://usn.ubuntu.com/4094-1/https://usn.ubuntu.com/4118-1/https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html https://access.redhat.com/errata/RHSA-2019:2043 https://nvd.nist.gov https://usn.ubuntu.com/4094-1/

CVE-2018-13093

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect