NULL pointer dereference in Linux kernel - CVE-2018-10323

Vulnerability identifier: #VU12185

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-10323

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists in the xfs_bmap_extents_to_btree function in the fs/xfs/libxfs/xfs_bmap.c source code file due to NULL pointer dereference when handling Extended File System (XFS) images. A local attacker can mount a specially crafted XFS filesystem image when filesystem operations are executed on the mounted image and cause the service to crash.

Linux kernel
Debian Linux
Slackware Linux
Ubuntu
Fedora
linux-image-powerpc-e500mc-lts-xenial (Ubuntu package)
linux-image-generic-lts-xenial (Ubuntu package)
linux-image-generic-lpae-lts-xenial (Ubuntu package)
linux-image-powerpc-smp-lts-xenial (Ubuntu package)
linux-image-powerpc64-emb-lts-xenial (Ubuntu package)
linux-image-lowlatency-lts-xenial (Ubuntu package)
linux-image-virtual-lts-xenial (Ubuntu package)
linux-image-powerpc64-smp-lts-xenial (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-powerpc-e500mc (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-powerpc-smp (Ubuntu package)
linux-image-powerpc64-emb (Ubuntu package)
linux-image-powerpc64-smp (Ubuntu package)
linux-image-4.4.0-189-generic (Ubuntu package)
linux-image-4.4.0-189-powerpc64-smp (Ubuntu package)
linux-image-4.4.0-189-powerpc64-emb (Ubuntu package)
linux-image-4.4.0-189-powerpc-smp (Ubuntu package)
linux-image-4.4.0-189-powerpc-e500mc (Ubuntu package)
linux-image-4.4.0-189-lowlatency (Ubuntu package)
linux-image-4.4.0-189-generic-lpae (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-4.4.0-1077-aws (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.4.0-1079-kvm (Ubuntu package)
linux-image-4.4.0-1113-aws (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.4.0-1138-raspi2 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.4.0-1142-snapdragon (Ubuntu package)
linux-4.4.240/kernel-generic
linux-4.4.240/kernel-huge
linux-4.4.240/kernel-modules
linux-4.4.240/kernel-headers
kernel

Cybersecurity Help is currently unaware of any solutions addressing the vulnerability.

linux-image-powerpc-e500mc-lts-xenial (Ubuntu package) - update to 4.4.0.189.165
linux-image-generic-lts-xenial (Ubuntu package) - update to 4.4.0.189.165
linux-image-generic-lpae-lts-xenial (Ubuntu package) - update to 4.4.0.189.165
linux-image-powerpc-smp-lts-xenial (Ubuntu package) - update to 4.4.0.189.165
linux-image-powerpc64-emb-lts-xenial (Ubuntu package) - update to 4.4.0.189.165
linux-image-lowlatency-lts-xenial (Ubuntu package) - update to 4.4.0.189.165
linux-image-virtual-lts-xenial (Ubuntu package) - update to 4.4.0.189.165
linux-image-powerpc64-smp-lts-xenial (Ubuntu package) - update to 4.4.0.189.165
linux-image-lowlatency (Ubuntu package) - update to 4.4.0.189.195
linux-image-powerpc-e500mc (Ubuntu package) - update to 4.4.0.189.195
linux-image-generic-lpae (Ubuntu package) - update to 4.4.0.189.195
linux-image-virtual (Ubuntu package) - update to 4.4.0.189.195
linux-image-generic (Ubuntu package) - update to 4.4.0.189.195
linux-image-powerpc-smp (Ubuntu package) - update to 4.4.0.189.195
linux-image-powerpc64-emb (Ubuntu package) - update to 4.4.0.189.195
linux-image-powerpc64-smp (Ubuntu package) - update to 4.4.0.189.195
linux-image-4.4.0-189-generic (Ubuntu package) - addressed in versions 4.4.0-189.219, 4.4.0-189.219~14.04.1
linux-image-4.4.0-189-powerpc64-smp (Ubuntu package) - addressed in versions 4.4.0-189.219, 4.4.0-189.219~14.04.1
linux-image-4.4.0-189-powerpc64-emb (Ubuntu package) - addressed in versions 4.4.0-189.219, 4.4.0-189.219~14.04.1
linux-image-4.4.0-189-powerpc-smp (Ubuntu package) - addressed in versions 4.4.0-189.219, 4.4.0-189.219~14.04.1
linux-image-4.4.0-189-powerpc-e500mc (Ubuntu package) - addressed in versions 4.4.0-189.219, 4.4.0-189.219~14.04.1
linux-image-4.4.0-189-lowlatency (Ubuntu package) - addressed in versions 4.4.0-189.219, 4.4.0-189.219~14.04.1
linux-image-4.4.0-189-generic-lpae (Ubuntu package) - addressed in versions 4.4.0-189.219, 4.4.0-189.219~14.04.1
linux-image-aws (Ubuntu package) - addressed in versions 4.4.0.1077.74, 4.4.0.1113.118
linux-image-4.4.0-1077-aws (Ubuntu package) - update to 4.4.0-1077.81
linux-image-kvm (Ubuntu package) - update to 4.4.0.1079.77
linux-image-4.4.0-1079-kvm (Ubuntu package) - update to 4.4.0-1079.86
linux-image-4.4.0-1113-aws (Ubuntu package) - update to 4.4.0-1113.126
linux-image-raspi2 (Ubuntu package) - update to 4.4.0.1138.138
linux-image-4.4.0-1138-raspi2 (Ubuntu package) - update to 4.4.0-1138.147
linux-image-snapdragon (Ubuntu package) - update to 4.4.0.1142.134
linux-image-4.4.0-1142-snapdragon (Ubuntu package) - update to 4.4.0-1142.151
linux-4.4.240/kernel-generic - update to 4.4.240
linux-4.4.240/kernel-huge - update to 4.4.240
linux-4.4.240/kernel-modules - update to 4.4.240
linux-4.4.240/kernel-headers - update to 4.4.240_smp
kernel - update to 4.16.8-300.fc28

• https://bugzilla.kernel.org/show_bug.cgi?id=199423

• Denial of service in Linux Kernel
• Debian update for linux
• Ubuntu update for linux
• Slackware Linux update for kernel
• Fedora 28 update for kernel