CVE-2018-10876

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2018-10876

CGA ID

CGA-3gp2-rmcw-j3q8

Severity

Unknown

Description

A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image.

References

https://images.chainguard.dev/security/CGA-3gp2-rmcw-j3q8
https://github.com/advisories/GHSA-jw6w-m4jf-m6xp
http://www.securityfocus.com/bid/106503
https://access.redhat.com/errata/RHSA-2019:0525
https://bugzilla.kernel.org/show_bug.cgi?id=199403
http://patchwork.ozlabs.org/patch/929239/
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10876
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8844618d8aa7a9973e7b527d038a2a589665002c
http://www.securityfocus.com/bid/104904
https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html
https://usn.ubuntu.com/3753-1/
https://usn.ubuntu.com/3753-2/
https://usn.ubuntu.com/3871-1/
https://usn.ubuntu.com/3871-3/
https://usn.ubuntu.com/3871-4/
https://usn.ubuntu.com/3871-5/
https://security-tracker.debian.org/tracker/CVE-2018-10876

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CVE-2018-10876

Severity

Description

References

Affected packages

Products

Why Chainguard

Customers

Company

Resources