VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel.
Advisory: CVE-2018-13093
Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2018-13093
CVSS severity score: 4.3/10.0
Description:
An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.
This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.
Comment 1 by zsm@chromium.org
, Aug 24Labels: Security_Impact-None Security_Severity-Low Pri-3
Owner: zsm@chromium.org
Status: WontFix (was: Untriaged)
Upstream commit is afca6c5b("xfs: validate cached inodes are free when allocated"). This patch is present in v4.14. CONFIG_XFS_FS is not set in any of our kernels, marking as WontFix.