tocsin

Debian/linux: medium 6.6

Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4_xattr_set_entry() function. An attacker could exploit this by operating on a mounted crafted ext4 image.

Action: Upgrade linux to 4.17.3-1 or later.

Affected

introducedfixedlast affected
04.17.3-1-

Fixed versions

4.17.3-1

Sources

published · modified · JSON