Launchpad CVE tracker

CVE 2018-1093

The ext4_valid_block_bitmap function in fs/ext4/balloc.c in the Linux kernel through 4.15.15 allows attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image because balloc.c and ialloc.c do not validate bitmap block numbers.

Related bugs and status

CVE-2018-1093 (Candidate) is related to these bugs:

Bug #1774181: Update to upstream's implementation of Spectre v1 mitigation

		In	Importance	Status
1774181	Update to upstream's implementation of Spectre v1 mitigation	linux (Ubuntu)	Undecided	Invalid
1774181	Update to upstream's implementation of Spectre v1 mitigation	linux (Ubuntu Precise)	Undecided	Fix Released
1774181	Update to upstream's implementation of Spectre v1 mitigation	linux (Ubuntu Trusty)	Undecided	Fix Released
1774181	Update to upstream's implementation of Spectre v1 mitigation	linux (Ubuntu Xenial)	Undecided	Fix Released

Bug #1775137: Prevent speculation on user controlled pointer

		In	Importance	Status
1775137	Prevent speculation on user controlled pointer	linux (Ubuntu)	Undecided	Invalid
1775137	Prevent speculation on user controlled pointer	linux (Ubuntu Xenial)	Undecided	Fix Released
1775137	Prevent speculation on user controlled pointer	linux (Ubuntu Precise)	Undecided	Fix Released
1775137	Prevent speculation on user controlled pointer	linux (Ubuntu Trusty)	Undecided	Fix Released

Bug #1777029: fscache: Fix hanging wait on page discarded by writeback

		In	Importance	Status
1777029	fscache: Fix hanging wait on page discarded by writeback	linux (Ubuntu)	High	Confirmed
1777029	fscache: Fix hanging wait on page discarded by writeback	linux (Ubuntu Bionic)	High	Fix Released
1777029	fscache: Fix hanging wait on page discarded by writeback	linux (Ubuntu Trusty)	High	Fix Released
1777029	fscache: Fix hanging wait on page discarded by writeback	linux (Ubuntu Artful)	High	Won't Fix
1777029	fscache: Fix hanging wait on page discarded by writeback	linux (Ubuntu Xenial)	High	Fix Released

Bug #1779923: other users' coredumps can be read via setgid directory and killpriv bypass

		In	Importance	Status
1779923	other users' coredumps can be read via setgid directory and killpriv bypass	linux (Ubuntu)	Medium	Fix Released
1779923	other users' coredumps can be read via setgid directory and killpriv bypass	linux (Ubuntu Trusty)	Medium	Fix Released
1779923	other users' coredumps can be read via setgid directory and killpriv bypass	linux (Ubuntu Cosmic)	Medium	Won't Fix
1779923	other users' coredumps can be read via setgid directory and killpriv bypass	linux (Ubuntu Bionic)	Medium	Fix Released
1779923	other users' coredumps can be read via setgid directory and killpriv bypass	linux (Ubuntu Xenial)	Medium	Fix Released

Bug #1787281: errors when scanning partition table of corrupted AIX disk

		In	Importance	Status
1787281	errors when scanning partition table of corrupted AIX disk	linux (Ubuntu)	Medium	Fix Released
1787281	errors when scanning partition table of corrupted AIX disk	linux (Ubuntu Bionic)	Undecided	Fix Released
1787281	errors when scanning partition table of corrupted AIX disk	linux (Ubuntu Xenial)	Undecided	Fix Released
1787281	errors when scanning partition table of corrupted AIX disk	linux (Ubuntu Trusty)	Undecided	Fix Released

Bug #1787982: linux: 3.13.0-157.207 -proposed tracker

		In	Importance	Status
1787982	linux: 3.13.0-157.207 -proposed tracker	linux (Ubuntu)	Undecided	Invalid
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow upload-to-ppa	Medium	Invalid
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	linux (Ubuntu Trusty)	Undecided	Fix Released

Bug #1788563: L1TF mitigation not effective in some CPU and RAM combinations

		In	Importance	Status
1788563	L1TF mitigation not effective in some CPU and RAM combinations	linux (Ubuntu)	High	Fix Released
1788563	L1TF mitigation not effective in some CPU and RAM combinations	linux (Ubuntu Cosmic)	High	Fix Released
1788563	L1TF mitigation not effective in some CPU and RAM combinations	linux (Ubuntu Trusty)	High	Fix Released
1788563	L1TF mitigation not effective in some CPU and RAM combinations	linux (Ubuntu Bionic)	High	Fix Released
1788563	L1TF mitigation not effective in some CPU and RAM combinations	linux (Ubuntu Xenial)	High	Fix Released
1788563	L1TF mitigation not effective in some CPU and RAM combinations	linux (Ubuntu Precise)	High	Fix Released

Bug #1788817: BUG: soft lockup - CPU#0 stuck for 23s! [kworker/0:1:1119]

Summary				In	Importance	Status
	1788817	BUG: soft lockup - CPU#0 stuck for 23s! [kworker/0:1:1119]		linux (Ubuntu)	Medium	Invalid
	1788817	BUG: soft lockup - CPU#0 stuck for 23s! [kworker/0:1:1119]		linux (Ubuntu Trusty)	Medium	Fix Released

Bug #1789131: Probable regression with EXT3 file systems and CVE-2018-1093 patches

Summary				In	Importance	Status
	1789131	Probable regression with EXT3 file systems and CVE-2018-1093 patches		linux (Ubuntu)	Critical	Fix Released
	1789131	Probable regression with EXT3 file systems and CVE-2018-1093 patches		linux (Ubuntu Trusty)	Critical	Fix Released

Bug #1789215: i40e NIC not recognized

Summary				In	Importance	Status
	1789215	i40e NIC not recognized		linux (Ubuntu)	Undecided	Invalid
	1789215	i40e NIC not recognized		linux (Ubuntu Trusty)	Undecided	Fix Released

Bug #1791754: linux: 3.13.0-159.209 -proposed tracker

		In	Importance	Status
1791754	linux: 3.13.0-159.209 -proposed tracker	linux (Ubuntu)	Undecided	Invalid
1791754	linux: 3.13.0-159.209 -proposed tracker	linux (Ubuntu Trusty)	Medium	Fix Released
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Incomplete
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	In Progress
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	New
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	New
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Confirmed
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	In Progress
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow upload-to-ppa	Medium	Invalid
1791754	linux: 3.13.0-159.209 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Confirmed

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2018-1093

References