CVE-2018-1095: Null Pointer Dereference
Last updated 4 July 2026
Other sources
The ext4xattrcheckentries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a size as an error code, and consequently allows attackers to cause a denial of service (getacl NULL pointer dereference and system crash) via a crafted ext4 image.
— Launchpad
The Linux kernel is vulnerable to an out-of-bound access bug in the fs/posixacl.c:getacl() function. An attacker could trick a legitimate user or a privileged attacker could exploit this to cause a system crash or other unspecified impact with a crafted ext4 image. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.
References:
https://bugzilla.kernel.org/showbug.cgi?id=199185
http://seclists.org/oss-sec/2018/q1/284
An upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=54dd0e0a1b255
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 54dd0e0a1b255
Event History
Frequently Asked Questions
What is CVE-2018-1095?
CVE-2018-1095 is a vulnerability in the Linux kernel that can be exploited to cause a denial of service.
How severe is CVE-2018-1095?
CVE-2018-1095 has a severity level of low.
What is the affected software for CVE-2018-1095?
The affected software for CVE-2018-1095 includes Ubuntu linux-gke, linux-azure, linux-gcp, linux-euclid, and more.
How do I fix CVE-2018-1095?
To fix CVE-2018-1095, update your Linux kernel to version 4.17~ or higher.
Where can I find more information about CVE-2018-1095?
You can find more information about CVE-2018-1095 at the following references: [bugzilla.kernel.org](https://bugzilla.kernel.org/show_bug.cgi?id=199185), [seclists.org](http://seclists.org/oss-sec/2018/q1/284), and [git.kernel.org](https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=54dd0e0a1b255).