UBUNTU-CVE-2018-14616

Details

An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscrypt_do_page_crypto() in fs/crypto/crypto.c when operating on a file in a corrupted f2fs image.

Affected Packages(17 packages)

linux-raspi2

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1106.114

linux-snapdragon

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1110.115

linux-azure

Ubuntu 18.04 LTS

Fixed in:

5.0.0-1014.14~18.04.1

linux-gcp

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1040.42

linux-gke-4.15

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1040.42

linux-hwe

Ubuntu 18.04 LTS

Fixed in:

5.0.0-23.24~18.04.1

linux-oem

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1050.57

linux-raspi2

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1043.46

linux-snapdragon

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1060.66

linux-azure-fde

Ubuntu 20.04 LTS

Affected versions:

5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.15.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.1+16 more

References

REPORT

https://bugzilla.kernel.org/show_bug.cgi?id=200465

REPORT

https://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs.git/commit/?h=dev&id=91291e9998d208370eb8156c760691b873bd7522

REPORT

https://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs.git/commit/?h=dev&id=94929845722b7dc9482f660da4a328530fc10a8a

REPORT

https://ubuntu.com/security/CVE-2018-14616

ADVISORY

https://ubuntu.com/security/notices/USN-3932-1

ADVISORY

https://ubuntu.com/security/notices/USN-3932-2

ADVISORY

https://ubuntu.com/security/notices/USN-4094-1

ADVISORY

https://ubuntu.com/security/notices/USN-4118-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-14616