fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service (NULL pointer dereference and panic) by using a noflush_merge option that triggers a NULL value for a flush_cmd_control data structure.
4.4.0-1039.424.4.0-143.169~14.04.24.4.0-143.1694.4.0-1077.874.13.0-1005.74.13.0-1002.54.13.0-32.35~16.04.14.4.0-1041.474.4.0-1104.1124.4.0-1108.113Exploitability
AV:LAC:LPR:LUI:NScope
S:UImpact
C:NI:NA:HCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H