Summary
It was discovered that the XFS file system in the Linux kernel did not
properly handle mount failures in some situations. A local attacker could
possibly use this to cause a denial of service (system crash) or execute
arbitrary code. (CVE-2018-20976)
Benjamin Moody discovered that the XFS file system in the Linux kernel did
not properly handle an error condition when out of disk quota. A local
attacker could possibly use this to cause a denial of service.
(CVE-2019-15538)
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws-hwe | 4.15.0-1051.53~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-azure | 4.15.0-1060.65 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.15.0-65.74~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-oracle | 4.15.0-1026.29~16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-65.74 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1051.53 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1047.47 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem | 4.15.0-1057.66 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle | 4.15.0-1026.29 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1048.52 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-snapdragon | 4.15.0-1065.72 |
Vulnerabilities 2
-
Unscored —
An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_…
-
Unscored —
An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially we…