Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2018-10879

Description

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image.

POC

Reference

- https://bugzilla.kernel.org/show_bug.cgi?id=200001

- https://usn.ubuntu.com/3753-1/

- https://usn.ubuntu.com/3753-2/

Github

No PoCs found on GitHub currently.