Home

CVE-2018-13098

Description

An issue was discovered in fs/f2fs/inode.c in the Linux kernel through 4.17.3. A denial of service (slab out-of-bounds read and BUG) can occur for a modified f2fs filesystem image in which FI_EXTRA_ATTR is set in an inode.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.322

Associated Vulnerability

VulnerabilityOS Platform
Linux kernel (USN-4094-1) linux-image-gcp_4.15.0.1040.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-gcp_4.15.0.1040.54_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-gke_4.15.0.1040.43_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-gke_4.15.0.1040.54_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-kvm_4.15.0.1042.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-oem_4.15.0.58.79_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-oem_4.15.0.1050.54_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-azure_4.15.0.1055.58_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-oracle_4.15.0.1021.15_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-oracle_4.15.0.1021.24_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-generic_4.15.0.58.60_i386.debLinux
Linux kernel (USN-4094-1) linux-image-generic_4.15.0.58.60_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-virtual_4.15.0.58.60_i386.debLinux
Linux kernel (USN-4094-1) linux-image-virtual_4.15.0.58.60_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-gke-4.15_4.15.0.1040.43_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-lowlatency_4.15.0.58.60_i386.debLinux
Linux kernel (USN-4094-1) linux-image-lowlatency_4.15.0.58.60_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gcp_4.15.0-1040.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gcp_4.15.0-1040.42~16.04.1_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gke_4.15.0-1040.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1042-kvm_4.15.0-1042.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1050-oem_4.15.0-1050.57_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1055-azure_4.15.0-1055.60_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64_i386.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64~16.04.1_i386.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64~16.04.1_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-generic-hwe-16.04_4.15.0.58.79_i386.debLinux
Linux kernel (USN-4094-1) linux-image-generic-hwe-16.04_4.15.0.58.79_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-virtual-hwe-16.04_4.15.0.58.79_i386.debLinux
Linux kernel (USN-4094-1) linux-image-virtual-hwe-16.04_4.15.0.58.79_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1021-oracle_4.15.0-1021.23_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1021-oracle_4.15.0-1021.23~16.04.1_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64_i386.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64~16.04.1_i386.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64~16.04.1_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-lowlatency-hwe-16.04_4.15.0.58.79_i386.debLinux
Linux kernel (USN-4094-1) linux-image-lowlatency-hwe-16.04_4.15.0.58.79_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws_4.15.0.1047.46_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws-hwe_4.15.0.1047.47_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49~16.04.1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234