VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel.
Advisory: CVE-2018-13095
Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2018-13095
CVSS severity score: 4.3/10.0
Description:
An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.
This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.
Comment 1 by zsm@chromium.org
, Aug 24Labels: Security_Severity-Low Security_Impact-None Pri-3
Owner: zsm@chromium.org
Status: WontFix (was: Untriaged)
Upstream commit is 23fcb3340("xfs: More robust inode extent count validation") The commit is present in v4.14. Marking as WontFix as CONFIG_XFS_FS is not set in our kernels.