CVE-2018-13093
Description
An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.
Risk Information
Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.136
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Linux kernel (USN-4094-1) linux-image-gcp_4.15.0.1040.42_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-gcp_4.15.0.1040.54_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-gke_4.15.0.1040.43_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-gke_4.15.0.1040.54_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-kvm_4.15.0.1042.42_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-oem_4.15.0.58.79_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-oem_4.15.0.1050.54_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-azure_4.15.0.1055.58_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-oracle_4.15.0.1021.15_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-oracle_4.15.0.1021.24_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-generic_4.15.0.58.60_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-generic_4.15.0.58.60_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-virtual_4.15.0.58.60_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-virtual_4.15.0.58.60_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-gke-4.15_4.15.0.1040.43_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-lowlatency_4.15.0.58.60_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-lowlatency_4.15.0.58.60_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gcp_4.15.0-1040.42_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gcp_4.15.0-1040.42~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gke_4.15.0-1040.42_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1042-kvm_4.15.0-1042.42_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1050-oem_4.15.0-1050.57_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1055-azure_4.15.0-1055.60_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64~16.04.1_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-generic-hwe-16.04_4.15.0.58.79_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-generic-hwe-16.04_4.15.0.58.79_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-virtual-hwe-16.04_4.15.0.58.79_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-virtual-hwe-16.04_4.15.0.58.79_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1021-oracle_4.15.0-1021.23_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1021-oracle_4.15.0-1021.23~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64~16.04.1_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-lowlatency-hwe-16.04_4.15.0.58.79_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-lowlatency-hwe-16.04_4.15.0.58.79_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws_4.15.0.1047.46_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws-hwe_4.15.0.1047.47_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49~16.04.1_amd64.deb | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update bpftool-3.10.0-1062.el7.x86_64.rpm | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-3.10.0-1062.el7.x86_64.rpm | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-abi-whitelists-3.10.0-1062.el7.noarch.rpm | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-debug-3.10.0-1062.el7.x86_64.rpm | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-debug-devel-3.10.0-1062.el7.x86_64.rpm | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-devel-3.10.0-1062.el7.x86_64.rpm | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-doc-3.10.0-1062.el7.noarch.rpm | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-headers-3.10.0-1062.el7.x86_64.rpm | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-tools-3.10.0-1062.el7.x86_64.rpm | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-tools-libs-3.10.0-1062.el7.x86_64.rpm | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update kernel-tools-libs-devel-3.10.0-1062.el7.x86_64.rpm | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update perf-3.10.0-1062.el7.x86_64.rpm | Linux |
| (RHSA-2019:2029) kernel security, bug fix, and enhancement update python-perf-3.10.0-1062.el7.x86_64.rpm | Linux |
| Linux kernel (USN-4708-1) linux-image-generic_4.4.0.201.207_i386.deb | Linux |
| Linux kernel (USN-4708-1) linux-image-generic_4.4.0.201.207_amd64.deb | Linux |
| Linux kernel (USN-4708-1) linux-image-virtual_4.4.0.201.207_i386.deb | Linux |
| Linux kernel (USN-4708-1) linux-image-virtual_4.4.0.201.207_amd64.deb | Linux |
| Linux kernel (USN-4708-1) linux-image-lowlatency_4.4.0.201.207_i386.deb | Linux |
| Linux kernel (USN-4708-1) linux-image-lowlatency_4.4.0.201.207_amd64.deb | Linux |
| Linux kernel (USN-4708-1) linux-image-4.4.0-201-generic_4.4.0-201.233_i386.deb | Linux |
| Linux kernel (USN-4708-1) linux-image-4.4.0-201-generic_4.4.0-201.233_amd64.deb | Linux |
| Linux kernel (USN-4708-1) linux-image-4.4.0-201-lowlatency_4.4.0-201.233_i386.deb | Linux |
| Linux kernel (USN-4708-1) linux-image-4.4.0-201-lowlatency_4.4.0-201.233_amd64.deb | Linux |
| Linux kernel for cloud environments (USN-4709-1) linux-image-kvm_4.4.0.1087.85_amd64.deb | Linux |
| Linux kernel for cloud environments (USN-4709-1) linux-image-4.4.0-1087-kvm_4.4.0-1087.96_amd64.deb | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234