PT-2018-11487
CVE-2018-12929
·
Published
2018-06-28
·
Updated
2026-10-13
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel version 4.15.0
Description
The issue is related to the ntfs read locked inode function in the ntfs.ko filesystem driver, which allows attackers to trigger a use-after-free read. This could potentially cause a denial of service, resulting in a kernel oops or panic, via a crafted ntfs filesystem.
Recommendations
For Linux kernel version 4.15.0, consider updating to a newer version that contains a fix for this issue, as using a crafted ntfs filesystem could lead to a denial of service.
Found an issue in the description? Have something to add? Feel free to write us 👾