CVE-2018-13093 in Kernel
Summary
An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
07/03/2018
Disclosure
07/03/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 120200 | Linux Kernel xfs_icache.c lookup_slow null pointer dereference | 476 | Not defined | Official fix | CVE-2018-13093 |