CVE-2017-18241: Null Pointer Dereference
fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service (NULL pointer dereference and panic) by using a noflushmerge option that triggers a NULL value for a flushcmdcontrol data structure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2017-18241.
What is the severity of CVE-2017-18241?
The severity of CVE-2017-18241 is not mentioned in the provided information. Please refer to the references for more details.
How can local users exploit CVE-2017-18241?
Local users can exploit CVE-2017-18241 by using a noflush_merge option that triggers a NULL value for a flush_cmd_control data structure.
Which Linux kernel versions are affected by CVE-2017-18241?
Linux kernel versions before 4.13 are affected by CVE-2017-18241.
Are there any remedies available for CVE-2017-18241?
Yes, there are remedies available for CVE-2017-18241. Please refer to the affected software section for more details.