Null pointer dereference in Linux kernel - CVE-2018-13094

Vulnerability identifier: #VU13852

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-13094

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to cause DoS condition on the target system.

The vulnerability exists due to NULL pointer dereference in the fs/xfs/libxfs/xfs_attr_leaf.c source code file in the Extended File System (XFS) component when the xfs_da_shrink_inode() function is called with a NULL byte pointer. A local attacker can mount and perform operations on a crafted XFS image, trigger a NULL pointer dereference condition in the xfs_trans_binval() function and cause the service to crash.

Linux kernel
Amazon Linux AMI
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for IBM System z (Structure A)
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Real Time for NFV
Slackware Linux
Fedora

kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel-alt (Red Hat package)
linux-4.4.240/kernel-generic
linux-4.4.240/kernel-huge
linux-4.4.240/kernel-modules
linux-4.4.240/kernel-headers
kernel
Red Hat Virtualization Host

Cybersecurity Help is currently unaware of any solutions addressing the vulnerability.

kernel (Red Hat package) - update to 3.10.0-1062.el7
kernel-rt (Red Hat package) - update to 3.10.0-1062.rt56.1022.el7
kernel-alt (Red Hat package) - update to 4.14.0-115.7.1.el7a
linux-4.4.240/kernel-generic - update to 4.4.240
linux-4.4.240/kernel-huge - update to 4.4.240
linux-4.4.240/kernel-modules - update to 4.4.240
linux-4.4.240/kernel-headers - update to 4.4.240_smp
kernel - addressed in versions 4.17.5-100.fc27, 4.17.5-200.fc28

• https://bugzilla.kernel.org/show_bug.cgi?id=199969

• Denial of service in Linux Kernel
• Amazon Linux AMI update for kernel
• Red Hat update for kernel-rt
• Red Hat update for kernel-alt
• Red Hat update for kernel
• Slackware Linux update for kernel
• Fedora 28 update for kernel
• Fedora 27 update for kernel