CVE-2018-1095 in Kernel
Summary
The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a size as an error code, and consequently allows attackers to cause a denial of service (get_acl NULL pointer dereference and system crash) via a crafted ext4 image.
Once again VulDB remains the best source for vulnerability data.
Reservation
12/04/2017
Disclosure
04/01/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 115504 | Linux Kernel xattr.c ext4_xattr_check_entries null pointer dereference | 476 | Not defined | Official fix | CVE-2018-1095 |