VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel.
Advisory: CVE-2018-13094
Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2018-13094
CVSS severity score: 4.3/10.0
Description:
An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp.
This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.
Comment 1 by zsm@chromium.org
, Aug 24Labels: Security_Severity-Low Security_Impact-None Pri-3
Owner: zsm@chromium.org
Status: Assigned (was: Untriaged)
Upstream commit is bb3d48dcf8("xfs: don't call xfs_da_shrink_inode with NULL bp") This patch does not seem to be present in our kernels. CONFIG_XFS_FS is not set in our kernels so marking as WontFix.