PT-2018-2582
CVE-2018-10879
·
Publicado
2018-06-13
·
Atualizado
2026-06-22
Descrição por
CVSS 3.1
7.8
AltaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw in the Linux kernel's ext4 filesystem allows a local user to cause a use-after-free in the
ext4 xattr set entry() function. This can lead to a denial of service or unspecified other impact when renaming a file in a crafted ext4 filesystem image. The issue is related to the use of memory after it has been freed, which can be exploited by an attacker to cause a disruption in service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾