CVE-2018-10322

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-04-24 · updated 2026-06-17
Weakness: CWE-476

Description

The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.

Affected products

Linux kernel: through 4.16.3
RedHat Enterprise Linux Desktop: 7.0
RedHat Enterprise Linux Server: 7.0
RedHat Enterprise Linux Workstation: 7.0
RedHat Virtualization Host: 4.0

References

http://www.securityfocus.com/bid/103960
https://access.redhat.com/errata/RHSA-2018:2948
https://access.redhat.com/errata/RHSA-2018:3083
https://access.redhat.com/errata/RHSA-2018:3096
https://bugzilla.kernel.org/show_bug.cgi?id=199377
https://usn.ubuntu.com/4578-1/
https://usn.ubuntu.com/4579-1/
https://www.spinics.net/lists/linux-xfs/msg17215.html
http://www.securityfocus.com/bid/103960
https://access.redhat.com/errata/RHSA-2018:2948
https://access.redhat.com/errata/RHSA-2018:3083
https://access.redhat.com/errata/RHSA-2018:3096

Get alerted when CVE-2018-10322 or the next vulnerability affects your stack