CVE-2018-12233: Buffer Overflow
In the eaget function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setxattr twice with two different extended attribute names on the same file. This vulnerability can be triggered by an unprivileged user with the ability to create files and execute programs. A kmalloc call is incorrect, leading to slab-out-of-bounds in jfsxattr.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2018-12233.
What is the title of this vulnerability?
The title of this vulnerability is 'In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1 a memory corruption bug.'
How can this vulnerability be triggered?
This vulnerability can be triggered by calling setxattr twice with two different extended attribute names on the same file.
Who can trigger this vulnerability?
This vulnerability can be triggered by an unprivileged user with the ability to create files and set extended attributes.
What is the severity level of this vulnerability?
The severity level of this vulnerability is not specified.