UBUNTU-CVE-2018-10880

Details

Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service.

Affected Packages(35 packages)

linux-aws

Ubuntu 14.04 LTS

Fixed in:

4.4.0-1034.37

linux-azure

Ubuntu 14.04 LTS

Fixed in:

4.15.0-1037.39~14.04.2

linux-lts-xenial

Ubuntu 14.04 LTS

Fixed in:

4.4.0-139.165~14.04.1

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-139.165

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1072.82

linux-aws-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1032.34~16.04.1

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1037.39~16.04.1

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1027.28~16.04.1

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-45.48~16.04.1

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1037.43

References

REPORT

https://bugzilla.kernel.org/show_bug.cgi?id=200005

REPORT

https://ubuntu.com/security/CVE-2018-10880

ADVISORY

https://ubuntu.com/security/notices/USN-3821-1

ADVISORY

https://ubuntu.com/security/notices/USN-3821-2

ADVISORY

https://ubuntu.com/security/notices/USN-3871-1

ADVISORY

https://ubuntu.com/security/notices/USN-3871-3

ADVISORY

https://ubuntu.com/security/notices/USN-3871-4

ADVISORY

https://ubuntu.com/security/notices/USN-3871-5

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-10880