CVE-2018-13094: Null Pointer Dereference
An issue was discovered in fs/xfs/libxfs/xfsattrleaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfsdashrinkinode() is called with a NULL bp.
Other sources
An issue was discovered in the XFS filesystem in fs/xfs/libxfs/xfsattrleaf.c in the Linux kernel. A NULL pointer dereference may occur for a corrupted xfs image after xfsdashrinkinode() is called with a NULL bp. This can lead to a system crash and a denial of service.
References:
https://bugzilla.kernel.org/showbug.cgi?id=199969
An upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.18 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13094?
The severity of CVE-2018-13094 is low.
How does CVE-2018-13094 affect Linux kernel versions?
CVE-2018-13094 affects Linux kernel versions up to 4.17.3.
Which software packages are affected by CVE-2018-13094?
Software packages affected by CVE-2018-13094 include linux-flo, linux-aws, linux-azure, linux-azure-edge, linux, and more. Please refer to the CVE details for a complete list.
Is there a fix available for CVE-2018-13094?
Yes, the fix for CVE-2018-13094 is available in Linux kernel versions 4.18 and higher.
Where can I find more information about CVE-2018-13094?
You can find more information about CVE-2018-13094 in the references provided: https://bugzilla.kernel.org/show_bug.cgi?id=199969, https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next&id=bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a, https://github.com/torvalds/linux/commit/bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a