A NULL pointer dereference was found in the Linux kernel’s UDF file system functionality in the way the user triggers the udf_file_write_iter function for a malicious UDF image. This flaw allows a local user to crash the system.

Mitigation

As the UDF module (udf.ho) will be auto-loaded when required, its use can be disabled by preventing the module from loading with the following instructions:

echo "install udf /bin/true" >> /etc/modprobe.d/disable-udf.conf

If the system requires this module t\work correctly, this mitigation may not be suitable.

If you need further assistance, see the KCS article <https://access.redhat.com/solutions/41278&gt; or contact Red Hat Global Support Services.