Denial of Service Vulnerability in Linux Kernel's ext4 File System
CVE-2018-1093

5.5MEDIUM

Key Information:

Vendor

Linux
Status
Linux Kernel Through Version 4.15
Vendor
CVE Published:
2 April 2018

What is CVE-2018-1093?

The ext4_valid_block_bitmap function in the Linux kernel through version 4.15.15 contains a vulnerability allowing attackers to conduct denial of service attacks. By using a specially crafted ext4 image, an attacker can exploit this weakness to perform out-of-bounds reads, which may lead to system crashes. The issue arises from a lack of validation on bitmap block numbers within the balloc.c and ialloc.c files, compromising the integrity of the system. Prompt updates and patches are advised to mitigate potential risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Linux kernel through version 4.15 Linux kernel through version 4.15

References

https://usn.ubuntu.com/3752-2/
vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3676-1/
vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018/07/msg0...
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.