Summary
Wen Xu discovered that the XFS filesystem implementation in the Linux
kernel did not properly validate meta-data information. An attacker could
use this to construct a malicious xfs image that, when mounted, could cause
a denial of service (system crash).
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-189.219 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws | 4.4.0-1113.126 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-kvm | 4.4.0-1079.86 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-raspi2 | 4.4.0-1138.147 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-snapdragon | 4.4.0-1142.151 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-aws | 4.4.0-1077.81 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-lts-xenial | 4.4.0-189.219~14.04.1 |
Vulnerabilities 1
-
Unscored —
The xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap.c in the Linux kernel through 4.16.3 allows local user…
References
-
report
https://ubuntu.com/security/CVE-2018-10323