Vulnetix
Try Vulnetix Request Demo
CVE-2017-18257 PUBLISHED

The __get_data_block function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow and loop) via crafted use of the open and fallocate system calls with an FS_IOC_FIEMAP ioctl.

EPSS 0.11% · 29.5th percentile

Risk Scores

EPSS Score
0.11%
29.5th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlinux-aws4.4.0-1032.41, 4.4.0-1031.40, 4.4.0-1030.39
Ubuntu:16.04:LTSlinux-hwe0, 4.8.0-36.36~16.04.1, 4.8.0-39.42~16.04.1
Ubuntu:14.04:LTSlinux-lts-xenial4.4.0-47.68~14.04.1, 0, 4.4.0-13.29~14.04.1
Ubuntu:20.04:LTSlinux-gke5.4.0-1086.93, 5.4.0-1087.94, 5.4.0-1090.97
Ubuntu:14.04:LTSlinux-aws4.4.0-1022.22, 4.4.0-1019.19, 4.4.0-1017.17
Ubuntu:22.04:LTSlinux-riscv5.15.0-1026.30, 5.15.0-1017.19, 5.15.0-1018.21
Ubuntu:16.04:LTSlinux-gcp4.10.0-1004.4, 4.10.0-1006.6, 0
Ubuntu:16.04:LTSlinux-snapdragon4.4.0-1020.23, 0, 4.4.0-1012.12
Ubuntu:16.04:LTSlinux4.4.0-66.87, 4.4.0-42.62, 4.4.0-43.63
Ubuntu:Pro:FIPS:16.04:LTSlinux-fips4.4.0-1006.6, 0, 4.4.0-1003.3
Ubuntu:24.04:LTSlinux-raspi-realtime0, 6.8.0-2019.20
Ubuntu:20.04:LTSlinux-raspi25.3.0-1017.19, 5.3.0-1015.17, 5.4.0-1004.4
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1065.68+cvm2.1, 0, 5.4.0-1063.66+cvm2.2
Ubuntu:16.04:LTSlinux-kvm4.4.0-1004.9, 0, 4.4.0-1027.32
Ubuntu:22.04:LTSlinux-intel-iot-realtime5.15.0-1073.75, 0
Ubuntu:20.04:LTSlinux-riscv5.4.0-40.45, 5.4.0-39.44, 5.4.0-37.42
Ubuntu:16.04:LTSlinux-raspi24.4.0-1052.59, 4.4.0-1051.58, 4.4.0-1012.16
Ubuntu:22.04:LTSlinux-realtime0, 5.15.0-1032.35

Timeline

References

Open in Interactive Console →