Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4068-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4068-1 advisory. Adam Zabrocki discovered that the Intel i915 kernel mode graphics driver in the Linux kernel did not properly restrict mmap ranges in some situations. A...

Ubuntu 19.04 : Linux kernel vulnerabilities (USN-4069-1)

It was discovered that an integer overflow existed in the Linux kernel when reference counting pages, leading to potential use-after-free issues. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-11487 Jann Horn discovered that ...

Memory Corruption

Linux kernel is vulnerable to memory corruption vulnerability. The vulnerability exists in the function jbd2journaldirtymetadata of the component EXT4 File System. A local user could cause an out-of-bound write in the function jbd2journaldirtymetadata causing a denial of service condition by...

Memory Corruption

Linux kernel is vulnerable to memory corruption vulnerability. The vulnerability exists in the function ext4getgroupinfo of the component EXT4 File System. A local user could cause an out-of-bound in the function ext4getgroupinfo resulting a denial of service condition...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in the way the Linux kernel's ext4 file system driver handled non-journal file systems with an orphan list. An attacker with physical access to the system could use this flaw to crash the system or, although unlikely, escalate their...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in the way the Linux kernel's ext4 file system handled the page size block size condition when the fallocate zero range functionality was used. A local attacker could use this flaw to crash the system...

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way the Linux kernel's XFS file system handled replacing of remote attributes under certain conditions. A local user with access to XFS file system mount could potentially use this fla...

The vulnerability of the ext4_extremove_space() function in the Linux operating system allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the ext4extremovespace function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code using a specially created ext4 file system imag...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3879-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3879-1 advisory. Wen Xu discovered that the ext4 file system implementation in the Linux kernel could possibly perform an out of bounds write when updating the journal fo...

Information Disclosure

Linux kernel is vulnerable to information disclosure. A race condition in fs/ext4/extents.c when using ext4 file system allows a local unprivileged user to retrieve confidential information from a deleted file whose data blocks have not yet been written...

kernel: NULL pointer dereference in ext4/xattr.c:ext4_xattr_inode_hash() causes crash with crafted ext4 image

The Linux kernel is vulnerable to a NULL pointer dereference in the ext4/xattr.c:ext4xattrinodehash function. An attacker could trick a legitimate user or a privileged attacker could exploit this to cause a NULL pointer dereference with a crafted ext4 image...

SUSE-SU-2018:1855-2 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5848: In the function wmisetie, the length validation code did not handle unsigned integer overflow properly. As a result, a large value of the 'ielen...

Linux kernel memory misreference vulnerability (CNVD-2018-24387)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory misreference vulnerability exists in the 'ext4extremovespace' function of the ext4 file system code in the Linux kernel. An attacker can exploit this...

Linux kernel denial of service vulnerability (CNVD-2018-17476)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the ext4 file system code in the Linux kernel. An attacker can exploit this vulnerability with the help of a specially crafted ext4...

USN-3718-1: Linux kernel regression

USN-3695-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. Unfortunately, the fix for CVE-2018-1108 introduced a regression where insufficient early entropy prevented services from starting, leading in some situations to a failure to boot, This update addresses the issue. We...

SUSE-SU-2018:1987-1 Security update for e2fsprogs

This update for e2fsprogs fixes the following issues: Security issues fixed: - CVE-2015-0247: Fixed couple of heap overflows in e2fsprogs fsck, dumpe2fs, e2image... bsc915402. - CVE-2015-1572: Fixed potential buffer overflow in closefs bsc918346. Bug fixes: - bsc1038194: generic/405 test fails wi...

DEBIAN-CVE-2018-10877

Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4extdroprefs function when operating on a crafted ext4 filesystem image...

CVE-2018-10840

Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4xattrsetentry function. An attacker could exploit this by operating on a mounted crafted ext4 image...

Ubuntu: Security Advisory (USN-3695-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3695-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3695-2 advisory. USN-3695-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...