PT-2018-3518
CVE-2018-14613
·
Published
2018-07-26
·
Updated
2021-06-14
Description by
CVSS 2.0
7.1
HighMetricsAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 4.17.10
Description:
The issue is related to an invalid pointer dereference in the
io ctl map page() function when mounting and operating a crafted btrfs image. This is due to a lack of block group item validation in check leaf item in fs/btrfs/tree-checker.c. Exploitation of this issue may allow an attacker to cause a denial of service.Recommendations:
For Linux kernel versions prior to 4.17.10, update to a version 4.17.10 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted btrfs images to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾