Description
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux | 6, 7 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 3.11.5-1 | — |
| Debian 13 | linux | 3.11.5-1 | — |
| Debian 12 | linux | 3.11.5-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | kernel-rt +10 | 3.10.0-862.rt56.804.el7 | RHSA-2018:0676 |
| RHEL 7 | perf +18 | 3.10.0-862.el7 | RHSA-2018:1062 |
| RHEL 6 | perf +16 | 2.6.32-754.el6 | RHSA-2018:1854 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | perf +11 | 3.10.0-862.el7 | ELSA-2018-1062 |
Advisories 4
- RHSA-2018:1854 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2018:1062 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:0676 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- ELSA-2018-1062 Important: kernel security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 16, 2018
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1520893
- RHSA-2018:1854 vendor-advisory
- RHSA-2018:1062 vendor-advisory
- RHSA-2018:0676 vendor-advisory
- 102128 vdb-entry
- https://support.f5.com/csp/article/K42142782?utm_source=f5support&%3Butm_medium=RSS