cbcvebase.
CVE-2018-10879
published 2018-07-26

CVE-2018-10879: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or…

PriorityP337high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EPSS
0.86%
54.9th percentile
A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image.

Affected

18 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debianlinux< linux 4.17.3-1 (bookworm)linux 4.17.3-1 (bookworm)
googleandroid
linuxlinux_kernel< 4.17.64.17.6
linuxlinux_kernel>= 0 < 4.17.3-14.17.3-1
linuxlinux_kernel>= 0 < 4.17.3-14.17.3-1
linuxlinux_kernel>= 0 < 4.17.3-14.17.3-1
linuxlinux_kernel>= 0 < 4.17.3-14.17.3-1
linuxlinux_kernel>= 0 < 4.4.0-134.1604.4.0-134.160
linuxlinux_kernel>= 0 < 4.15.0-44.474.15.0-44.47
linuxlinux_kernel>= 0 < 4.15.0-45.484.15.0-45.48
redhatenterprise_linux
redhatenterprise_linux_desktop
redhatenterprise_linux_server
redhatenterprise_linux_workstation

CVSS provenance

nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.1MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:C
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian4.2MEDIUM
vendor_redhat4.2MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.