CVE-2018-13099: Medium severity Linux Linux kernel vulnerability
An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service (out-of-bounds memory access and BUG) can occur for a modified f2fs filesystem image in which an inline inode contains an invalid reserved blkaddr.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13099?
CVE-2018-13099 is classified as a denial of service vulnerability due to out-of-bounds memory access in the Linux kernel.
How do I fix CVE-2018-13099?
To fix CVE-2018-13099, upgrade to the secure versions listed, such as 5.10.223-1 or 6.1.123-1, among others.
Which Linux kernel versions are affected by CVE-2018-13099?
CVE-2018-13099 affects Linux kernel versions up to and including 4.4.
What types of systems are affected by CVE-2018-13099?
CVE-2018-13099 impacts systems running modified f2fs filesystem images in Linux distributions such as Debian, Ubuntu, and openSUSE.
What are the consequences of exploiting CVE-2018-13099?
Exploiting CVE-2018-13099 can lead to a denial of service condition where the system may become unresponsive.