CVE-2018-13095
Published: 3 July 2018
An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.
From the Ubuntu Security Team
Wen Xu discovered that the xfs file system implementation in the Linux kernel did not properly validate the number of extents in an inode. An attacker could use this to construct a malicious xfs image that, when mounted, could cause a denial of service (system crash).
Priority
Status
Package | Release | Status |
---|---|---|
linux
Launchpad, Ubuntu, Debian |
artful |
Ignored
(end of life)
|
bionic |
Released
(4.15.0-141.145)
|
|
cosmic |
Not vulnerable
(4.18.0-7.8)
|
|
disco |
Not vulnerable
(4.18.0-10.11)
|
|
eoan |
Not vulnerable
(5.0.0-13.14)
|
|
focal |
Not vulnerable
(5.4.0-9.12)
|
|
groovy |
Not vulnerable
(5.4.0-26.30)
|
|
hirsute |
Not vulnerable
(5.8.0-36.40+21.04.1)
|
|
trusty |
Ignored
(was needed ESM criteria)
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Released
(4.4.0-207.239)
|
|
Patches:
Introduced by
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
|
||
linux-aws
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Released
(4.15.0-1098.105)
|
|
cosmic |
Not vulnerable
(4.18.0-1002.3)
|
|
disco |
Not vulnerable
(4.18.0-1002.3)
|
|
eoan |
Not vulnerable
(5.0.0-1004.4)
|
|
focal |
Not vulnerable
(5.4.0-1005.5)
|
|
groovy |
Not vulnerable
(5.4.0-1009.9)
|
|
hirsute |
Not vulnerable
(5.8.0-1018.20+21.04.1)
|
|
trusty |
Released
(4.4.0-1090.94)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Released
(4.4.0-1126.140)
|
|
linux-aws-5.0
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.0.0-1021.24~18.04.1)
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-aws-5.3
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.3.0-1016.17~18.04.1)
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-aws-5.4
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.4.0-1018.18~18.04.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-aws-hwe
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Released
(4.15.0-1098.105~16.04.1)
|
|
linux-azure
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Released
(4.18.0-1011.11~18.04.1)
|
|
cosmic |
Not vulnerable
(4.18.0-1003.3)
|
|
disco |
Not vulnerable
(4.18.0-1003.3)
|
|
eoan |
Not vulnerable
(5.0.0-1004.4)
|
|
focal |
Not vulnerable
(5.4.0-1006.6)
|
|
groovy |
Not vulnerable
(5.4.0-1010.10)
|
|
hirsute |
Not vulnerable
(5.8.0-1016.17+21.04.1)
|
|
trusty |
Released
(4.15.0-1112.124~14.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Released
(4.15.0-1112.124~16.04.1)
|
|
linux-azure-4.15
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1112.125)
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-azure-5.3
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.3.0-1007.8~18.04.1)
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-azure-5.4
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.4.0-1020.20~18.04.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-azure-edge
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Released
(4.18.0-1011.11~18.04.1)
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-dell300x
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1016.20)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-euclid
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Ignored
(was needed ESM criteria)
|
|
linux-flo
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Ignored
(abandoned)
|
|
linux-gcp
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Released
(5.0.0-1020.20~18.04.1)
|
|
cosmic |
Not vulnerable
(4.18.0-1002.3)
|
|
disco |
Not vulnerable
(4.18.0-1002.3)
|
|
eoan |
Not vulnerable
(5.0.0-1004.4)
|
|
focal |
Not vulnerable
(5.4.0-1005.5)
|
|
groovy |
Not vulnerable
(5.4.0-1009.9)
|
|
hirsute |
Not vulnerable
(5.8.0-1015.15+21.04.1)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Released
(4.15.0-1097.110~16.04.1)
|
|
linux-gcp-4.15
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1097.110)
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.3
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.3.0-1008.9~18.04.1)
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.4
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.4.0-1019.19~18.04.2)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-gcp-edge
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.0.0-1020.20~18.04.1)
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-gke
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1033.35)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Ignored
(end of standard support)
|
|
linux-gke-4.15
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needed)
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-gke-5.0
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.0.0-1011.11~18.04.1)
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-gke-5.3
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.3.0-1011.12~18.04.1)
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-gke-5.4
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.4.0-1025.25~18.04.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-gkeop
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
(5.4.0-1008.9)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-gkeop-5.4
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.4.0-1001.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-goldfish
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Ignored
(end of life)
|
|
linux-grouper
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-hwe
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Not vulnerable
(4.18.0-13.14~18.04.1)
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Ignored
(end of life, was pending)
|
|
linux-hwe-5.4
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.4.0-37.41~18.04.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-hwe-5.8
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
(5.8.0-23.24~20.04.1)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-hwe-edge
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Not vulnerable
(5.0.0-15.16~18.04.1)
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Ignored
(end of life, was needed)
|
|
linux-kvm
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Released
(4.15.0-1089.91)
|
|
cosmic |
Not vulnerable
(4.18.0-1002.2)
|
|
disco |
Not vulnerable
(4.18.0-1003.3)
|
|
eoan |
Not vulnerable
(5.0.0-1004.4)
|
|
focal |
Not vulnerable
(5.4.0-1004.4)
|
|
groovy |
Not vulnerable
(5.4.0-1009.9)
|
|
hirsute |
Not vulnerable
(5.8.0-1010.11+21.04.1)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Released
(4.4.0-1091.100)
|
|
linux-lts-trusty
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-lts-utopic
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Ignored
(end of life, was ignored)
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-lts-vivid
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Ignored
(end of life, was ignored)
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-lts-wily
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Ignored
(end of life, was ignored)
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-lts-xenial
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Released
(4.4.0-208.240~14.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-maguro
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-mako
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Ignored
(abandoned)
|
|
linux-manta
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Does not exist
|
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-oem
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
bionic |
Ignored
(end of life, was needed)
|
|
cosmic |
Ignored
(end of life)
|
|
disco |
Ignored
(end of life)
|
|
eoan |
Ignored
(end of life)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Ignored
(end of standard support, was needed)
|
|
linux-oem-5.10
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
(5.10.0-1008.9)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-oem-5.6
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
eoan |
Does not exist
|
|
focal |
Not vulnerable
(5.6.0-1007.7)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-oem-osp1
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.0.0-1010.11)
|
disco |
Not vulnerable
(5.0.0-1010.11)
|
|
eoan |
Not vulnerable
(5.0.0-1010.11)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-oracle
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1069.77)
|
cosmic |
Ignored
(end of life)
|
|
disco |
Released
(5.0.0-1004.8)
|
|
eoan |
Not vulnerable
(5.3.0-1002.2)
|
|
focal |
Not vulnerable
(5.4.0-1005.5)
|
|
groovy |
Not vulnerable
(5.4.0-1009.9)
|
|
hirsute |
Not vulnerable
(5.8.0-1014.14+21.04.1)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Released
(4.15.0-1069.77~16.04.1)
|
|
linux-oracle-5.0
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.0.0-1007.12~18.04.1)
|
disco |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.3
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.3.0-1011.12~18.04.1)
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.4
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.4.0-1019.19~18.04.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-raspi
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
eoan |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1007.7)
|
|
groovy |
Not vulnerable
(5.4.0-1008.8)
|
|
hirsute |
Not vulnerable
(5.8.0-1008.11+21.04.1)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-raspi-5.4
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.4.0-1013.13~18.04.1)
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-raspi2
Launchpad, Ubuntu, Debian |
artful |
Ignored
(end of life)
|
bionic |
Released
(4.15.0-1083.88)
|
|
cosmic |
Not vulnerable
(4.18.0-1004.6)
|
|
disco |
Not vulnerable
(4.18.0-1005.7)
|
|
eoan |
Not vulnerable
(5.0.0-1006.6)
|
|
focal |
Not vulnerable
(5.4.0-1004.4)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Released
(4.4.0-1150.161)
|
|
linux-raspi2-5.3
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.3.0-1017.19~18.04.1)
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-riscv
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
eoan |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-24.28)
|
|
groovy |
Not vulnerable
(5.4.0-24.28)
|
|
hirsute |
Not vulnerable
(5.8.0-10.12+21.04.1)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Does not exist
|
|
linux-snapdragon
Launchpad, Ubuntu, Debian |
artful |
Ignored
(end of life)
|
bionic |
Released
(4.15.0-1100.109)
|
|
cosmic |
Does not exist
|
|
disco |
Not vulnerable
(5.0.0-1010.10)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.18~rc3)
|
|
xenial |
Released
(4.4.0-1154.164)
|
Severity score breakdown
Parameter | Value |
---|---|
Base score | 5.5 |
Attack vector | Local |
Attack complexity | Low |
Privileges required | None |
User interaction | Required |
Scope | Unchanged |
Confidentiality | None |
Integrity impact | None |
Availability impact | High |
Vector | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
References
- https://bugzilla.kernel.org/show_bug.cgi?id=199915
- https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next&id=23fcb3340d033d9f081e21e6c12c2db7eaa541d3
- https://github.com/torvalds/linux/commit/23fcb3340d033d9f081e21e6c12c2db7eaa541d3
- https://ubuntu.com/security/notices/USN-4904-1
- https://ubuntu.com/security/notices/USN-4907-1
- https://www.cve.org/CVERecord?id=CVE-2018-13095
- NVD
- Launchpad
- Debian