PT-2018-3518
CVE-2018-14613
·
تاريخ النشر
2018-07-26
·
تاريخ التحديث
2021-06-14
الوصف من
CVSS 2.0
7.1
عاليةالمقاييسAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 4.17.10
Description:
The issue is related to an invalid pointer dereference in the
io ctl map page() function when mounting and operating a crafted btrfs image. This is due to a lack of block group item validation in check leaf item in fs/btrfs/tree-checker.c. Exploitation of this issue may allow an attacker to cause a denial of service.Recommendations:
For Linux kernel versions prior to 4.17.10, update to a version 4.17.10 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted btrfs images to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾