CVE-2018-1094 in Linux Kernel
Summary
The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc32c checksum driver, which allows attackers to cause a denial of service (ext4_xattr_inode_hash NULL pointer dereference and system crash) via a crafted ext4 image.
Reservation
12/04/2017
Disclosure
04/01/2018
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 115503 | Linux Kernel super.c ext4_fill_super null pointer dereference | 476 | Not defined | Official fix | CVE-2018-1094 |