⌘ + K

UBUNTU-CVE-2018-14610

Dashboard / Vulnerabilities / UBUNTU-CVE-2018-14610

UBUNTU-CVE-2018-14610

Published: 27 Jul 2018Last Modified: 9 Sept 2026

Upstream:

Aliases:

Summary:

Details: An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image, because of a lack of verification that each block group has a corresponding chunk at mount time, within btrfs_read_block_groups in fs/btrfs/extent-tree.c.

References: https://ubuntu.com/security/CVE-2018-14610, https://bugzilla.kernel.org/show_bug.cgi?id=199837, https://patchwork.kernel.org/patch/10503415/, https://ubuntu.com/security/notices/USN-3932-1, https://ubuntu.com/security/notices/USN-3932-2, https://ubuntu.com/security/notices/USN-4094-1, https://ubuntu.com/security/notices/USN-4118-1, https://www.cve.org/CVERecord?id=CVE-2018-14610

Affected packages

Package

Name: linux-aws

Purl: pkg:deb/ubuntu/linux-aws?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM

Events:

Introduced- 0

Fixed -4.4.0-1040.43

Affected versions

4.4.0-1002.2

4.4.0-1003.3

4.4.0-1005.5

4.4.0-1006.6

4.4.0-1009.9

4.4.0-1010.10

4.4.0-1011.11

4.4.0-1012.12

4.4.0-1014.14

4.4.0-1016.16

4.4.0-1017.17

4.4.0-1019.19

4.4.0-1022.22

4.4.0-1023.23

4.4.0-1024.25

4.4.0-1025.26

4.4.0-1027.30

4.4.0-1028.31

4.4.0-1029.32

4.4.0-1031.34

4.4.0-1032.35

4.4.0-1034.37

4.4.0-1036.39

4.4.0-1037.40

4.4.0-1038.41

4.4.0-1039.42

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High