CVE-2018-12233
- State
- Published
- Severity
- Not scored
- Published
- Jun 12, 2018
- Updated
- Aug 5, 2024
- Reserved
- Jun 12, 2018
Description
In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setxattr twice with two different extended attribute names on the same file. This vulnerability can be triggered by an unprivileged user with the ability to create files and execute programs. A kmalloc call is incorrect, leading to slab-out-of-bounds in jfs_xattr.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-3752-2vendor-advisory
- [debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security updatemailing-list
- 104452vdb-entry
- USN-3752-3vendor-advisory
- [debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security updatemailing-list
- USN-3753-2vendor-advisory
- USN-3754-1vendor-advisory
- [debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new packagemailing-list
- https://marc.info/?l=linux-kernel&m=152814391530549&w=2
- https://lkml.org/lkml/2018/6/2/2
- USN-3752-1vendor-advisory
- USN-3753-1vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.