Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2018-1092: Linux kernel ext4 can crash on zero link count root
CVE-2018-1092 · published 8 years ago
Summary
The ext4 file system code in Linux kernels up to version 4.15.15 can mishandle a root directory that reports zero links, leading to a crash that stops the system from working. This affects Ubuntu-based cloud images such as standard Linux, GKE, AWS, Azure, and the Xenial LTS release. Update the kernel to a newer version or apply the vendor's patch to prevent the crash.
What to do
- Update canonical linux to version 3.13.0-157.207.
- Update canonical linux-aws to version 4.4.0-1023.23.
- Update canonical linux-lts-xenial to version 4.4.0-128.154~14.04.1.
- Update canonical linux to version 4.4.0-128.154.
- Update canonical linux-aws to version 4.4.0-1061.70.
- Update canonical linux-azure to version 4.15.0-1013.13~16.04.2.
- Update canonical linux-gcp to version 4.13.0-1019.23.
- Update canonical linux-hwe to version 4.15.0-24.26~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1027.32.
- Update canonical linux-oem to version 4.13.0-1030.33.
- Update canonical linux-raspi2 to version 4.4.0-1091.99.
- Update canonical linux-snapdragon to version 4.4.0-1094.99.
- Update canonical linux-fips to version 4.4.0-1008.10.
- Update canonical linux to version 4.15.0-23.25.
- Update canonical linux-aws to version 4.15.0-1010.10.
- Update canonical linux-azure to version 4.15.0-1013.13.
- Update canonical linux-gcp to version 4.15.0-1009.9.
- Update canonical linux-kvm to version 4.15.0-1011.11.
- Update canonical linux-oem to version 4.15.0-1008.11.
- Update canonical linux-raspi2 to version 4.15.0-1012.13.
- Update debian linux to version 4.15.17-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:14.04:LTS | canonical | linux |
< 3.13.0-157.207 Fix: upgrade to 3.13.0-157.207
|
| Ubuntu:14.04:LTS | canonical | linux-aws |
< 4.4.0-1023.23 Fix: upgrade to 4.4.0-1023.23
|
| Ubuntu:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-128.154~14.04.1 Fix: upgrade to 4.4.0-128.154~14.04.1
|
| Ubuntu:16.04:LTS | canonical | linux |
< 4.4.0-128.154 Fix: upgrade to 4.4.0-128.154
|
| Ubuntu:16.04:LTS | canonical | linux-aws |
< 4.4.0-1061.70 Fix: upgrade to 4.4.0-1061.70
|
| Ubuntu:16.04:LTS | canonical | linux-azure |
< 4.15.0-1013.13~16.04.2 Fix: upgrade to 4.15.0-1013.13~16.04.2
|
| Ubuntu:16.04:LTS | canonical | linux-gcp |
< 4.13.0-1019.23 Fix: upgrade to 4.13.0-1019.23
|
| Ubuntu:16.04:LTS | canonical | linux-hwe |
< 4.15.0-24.26~16.04.1 Fix: upgrade to 4.15.0-24.26~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1027.32 Fix: upgrade to 4.4.0-1027.32
|
| Ubuntu:16.04:LTS | canonical | linux-oem |
< 4.13.0-1030.33 Fix: upgrade to 4.13.0-1030.33
|
| Ubuntu:16.04:LTS | canonical | linux-raspi2 |
< 4.4.0-1091.99 Fix: upgrade to 4.4.0-1091.99
|
| Ubuntu:16.04:LTS | canonical | linux-snapdragon |
< 4.4.0-1094.99 Fix: upgrade to 4.4.0-1094.99
|
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1008.10 Fix: upgrade to 4.4.0-1008.10
|
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-23.25 Fix: upgrade to 4.15.0-23.25
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1010.10 Fix: upgrade to 4.15.0-1010.10
|
| Ubuntu:18.04:LTS | canonical | linux-azure |
< 4.15.0-1013.13 Fix: upgrade to 4.15.0-1013.13
|
| Ubuntu:18.04:LTS | canonical | linux-gcp |
< 4.15.0-1009.9 Fix: upgrade to 4.15.0-1009.9
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1011.11 Fix: upgrade to 4.15.0-1011.11
|
| Ubuntu:18.04:LTS | canonical | linux-oem |
< 4.15.0-1008.11 Fix: upgrade to 4.15.0-1008.11
|
| Ubuntu:18.04:LTS | canonical | linux-raspi2 |
< 4.15.0-1012.13 Fix: upgrade to 4.15.0-1012.13
|
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Debian:12 | debian | linux |
< 4.15.17-1 Fix: upgrade to 4.15.17-1
|
| Debian:13 | debian | linux |
< 4.15.17-1 Fix: upgrade to 4.15.17-1
|
| Debian:14 | debian | linux |
< 4.15.17-1 Fix: upgrade to 4.15.17-1
|
| – | linux | linux_kernel |
<= 4.15.15 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
Original advisory text
The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero i_links_count, which allows attackers to cause a denial of service ...
The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero i_links_count, which allows attackers to cause a denial of service (ext4_process_freed_data NULL pointer dereference and OOPS) via a crafted ext4 image.
References
- https://ubuntu.com/security/CVE-2018-1092 Third Party Advisory
- https://ubuntu.com/security/notices/USN-3676-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-3676-2 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2018-1092 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2018-1092 Third Party Advisory
- http://openwall.com/lists/oss-security/2018/03/29/1 Mailing List Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2948
- https://access.redhat.com/errata/RHSA-2018:3083
- https://access.redhat.com/errata/RHSA-2018:3096
- https://bugzilla.kernel.org/show_bug.cgi?id=199275 Issue Tracking
- https://bugzilla.redhat.com/show_bug.cgi?id=1560777 Issue Tracking Third Party Advisory
- https://bugzilla.kernel.org/show_bug.cgi?id=199179 Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=8e4b5e... Patch
- https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
- https://usn.ubuntu.com/3676-1/
- https://usn.ubuntu.com/3676-2/
- https://usn.ubuntu.com/3677-1/
- https://usn.ubuntu.com/3677-2/
- https://usn.ubuntu.com/3678-1/
- https://usn.ubuntu.com/3678-2/
- https://usn.ubuntu.com/3678-3/
- https://usn.ubuntu.com/3678-4/
- https://usn.ubuntu.com/3754-1/
- https://www.debian.org/security/2018/dsa-4187
- https://www.debian.org/security/2018/dsa-4188
- https://ubuntu.com/security/notices/USN-3677-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-3677-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-3678-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-3678-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-3678-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-3678-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-3754-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-476NULL Pointer Dereference
Timeline
Published1 Apr 2018
Updated3 Nov 2026
First seen26 Aug 2026
Track software like this
Free during beta