CVE-2018-14613

Se ha descubierto un problema en el kernel de Linux hasta la versión 4.17.10. Hay una desreferencia de puntero no válido en io_ctl_map_page() cuando se monta y opera una imagen btrfs manipulada, debido a la falta de validación de elementos de grupos de bloques en check_leaf_item en fs/btrfs/tree-checker.c.

It was discovered that the alarmtimer implementation in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service. Wen Xu discovered that the XFS filesystem implementation in the Linux kernel did not properly track inode validations. An attacker could use this to construct a malicious XFS image that, when mounted, could cause a denial of service. Various other issues were also addressed.