CVE-2018-1094: Null Pointer Dereference
Last updated 4 July 2026
Other sources
The ext4fillsuper function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc32c checksum driver, which allows attackers to cause a denial of service (ext4xattrinodehash NULL pointer dereference and system crash) via a crafted ext4 image.
— Launchpad
The Linux kernel is vulnerable to a NULL pointer dereference in the ext4/xattr.c:ext4xattrinodehash() function. An attacker could trick a legitimate user or a privileged attacker could exploit this to cause a NULL pointer dereference with a crafted ext4 image.
References:
https://bugzilla.kernel.org/showbug.cgi?id=199183
http://seclists.org/oss-sec/2018/q1/284
Upstream patches:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a45403b51582a
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=18db4b4e6fc31
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1
Event History
Frequently Asked Questions
What is CVE-2018-1094?
CVE-2018-1094 is a vulnerability in the Linux kernel that allows attackers to cause a denial of service via a crafted ext4 image.
How severe is CVE-2018-1094?
CVE-2018-1094 has a severity rating of low.
Which Linux kernel versions are affected by CVE-2018-1094?
Linux kernel versions up to and including 4.15.15 are affected by CVE-2018-1094.
How can I fix CVE-2018-1094?
To fix CVE-2018-1094, update your Linux kernel to version 4.17 or later.
Where can I find more information about CVE-2018-1094?
You can find more information about CVE-2018-1094 at the following references: [Bugzilla](https://bugzilla.kernel.org/show_bug.cgi?id=199183), [OSS-Sec](http://seclists.org/oss-sec/2018/q1/284), [Git commit](https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a45403b51582a).