91 matches found
CVE-2018-1092
The Linux kernel is vulnerable to a NULL pointer dereference in the ext4/mballoc.c:ext4processfreeddata function. An attacker could trick a legitimate user or a privileged attacker could exploit this by mounting a crafted ext4 image to cause a kernel panic...
PT-2019-4485 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.0.21 Description: The issue is related to a use-after-free in the ext4 put super function in fs/ext4/super.c, which is connected to the dump orphan list function in the same file. This can occur when mounting a crafted...
The vulnerability of the ext4_init_block_bitmap() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the ext4initblockbitmap function in the Linux operating system is related to writing data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created ext4 file system image...
A vulnerability in the transaction.c file of the Linux operating system’s kernel allows a hacker to trigger a service failure or increase their privileges.
The vulnerability in the transaction.c file of the Linux operating system is related to writing data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges by using a specially created ext4 file system image...
The vulnerability of the ext4_extDropRefs() function in the Linux operating system allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the ext4extDropRefs function in the Linux operating system relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code using a specially created ext4 file system image...
Denial Of Service (DoS)
kernel-rt is vulnerable to denial of service DoS attacks. The vulnerability exists as the ext4fillsuper function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service out-of-bound...
kernel: out-of-bound access in fs/posix_acl.c:get_acl() causes crash with crafted ext4 image
The Linux kernel is vulnerable to an out-of-bound access bug in the fs/posixacl.c:getacl function. An attacker could trick a legitimate user or a privileged attacker could exploit this to cause a system crash or other unspecified impact with a crafted ext4 image. Due to the nature of the flaw,...
kernel: stack-out-of-bounds write in ext4_update_inline_data function
A flaw was found in the Linux kernel's ext4 filesystem code. A stack-out-of-bounds write in ext4updateinlinedata is possible when mounting and writing to a crafted ext4 image. An attacker could use this to cause a system crash and a denial of service...
kernel: out-of-bound write in ext4_init_block_bitmap function with a crafted ext4 image
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image...
kernel: NULL pointer dereference in ext4/mballoc.c:ext4_process_freed_data() when mounting crafted ext4 image
The Linux kernel is vulnerable to a NULL pointer dereference in the ext4/mballoc.c:ext4processfreeddata function. An attacker could trick a legitimate user or a privileged attacker could exploit this by mounting a crafted ext4 image to cause a kernel panic...
kernel: use-after-free detected in ext4_xattr_set_entry with a crafted file
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4xattrsetentry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image...
Linux kernel memory misreference vulnerability (CNVD-2018-24387)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory misreference vulnerability exists in the 'ext4extremovespace' function of the ext4 file system code in the Linux kernel. An attacker can exploit this...
Linux kernel memory misreference vulnerability (CNVD-2018-24386)
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. ext4 filesystem is one of the ext4 filesystem components. A security vulnerability exists in the ext4 filesystem of the Linux kernel. The vulnerability can be exploited by an...
DEBIAN-CVE-2018-10876
A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4extremovespace function when mounting and operating a crafted ext4 image...
CVE-2018-10876
A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4extremovespace function when mounting and operating a crafted ext4 image...
DEBIAN-CVE-2018-10881
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4getgroupinfo function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image...
UBUNTU-CVE-2018-10876
A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4extremovespace function when mounting and operating a crafted ext4 image...
Linux kernel out-of-bounds access vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. ext4 filesystem is one of the ext4 filesystem components. A security vulnerability exists in the 'ext4extdroprefs' function in the Linux kernel ext4 filesystem. An attacker ca...
