VDB
CVE-2018-10876
CVE-2018-10876
PUBLISHED
CVSS 5.5 MEDIUM
A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image.
EPSS 0.77% · 55.6th percentile
Risk Scores
CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.77%
55.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | linux-snapdragon | 4.4.0-1012.12, 4.4.0-1054.58, 4.4.0-1072.77 |
| Ubuntu:16.04:LTS | linux-raspi2 | 4.2.0-1013.19, 4.4.0-1029.36, 4.4.0-1051.58 |
| Ubuntu:16.04:LTS | linux-azure | 4.15.0-1019.19~16.04.1, 4.15.0-1036.38~16.04.1, 4.15.0-1035.36~16.04.1 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | 6.11.0-1008.8~24.04.1, 6.11.0-1012.12~24.04.1, 6.11.0-1018.18~24.04.1 |
| Ubuntu:22.04:LTS | linux-realtime | 5.15.0-1032.35, 0 |
| Ubuntu:18.04:LTS | linux-snapdragon | 4.4.0-1081.86, 4.4.0-1079.84, 4.4.0-1077.82 |
| Ubuntu:16.04:LTS | linux-gcp | 4.13.0-1006.9, 4.10.0-1009.9, 4.10.0-1008.8 |
| Ubuntu:24.04:LTS | linux-hwe-6.11 | 6.11.0-26.26~24.04.1, 6.11.0-24.24~24.04.1, 6.11.0-21.21~24.04.1 |
| Ubuntu:18.04:LTS | linux-azure | 4.15.0-1009.9, 4.15.0-1002.2, 4.15.0-1003.3 |
| Ubuntu:20.04:LTS | linux-riscv | 5.4.0-37.42, 5.4.0-30.34, 5.4.0-39.44 |
| Ubuntu:18.04:LTS | linux-aws | 4.15.0-1009.9, 4.15.0-1010.10, 4.15.0-1011.11 |
| Ubuntu:Pro:20.04:LTS | linux-azure-fde-5.15 | 5.15.0-1050.57~20.04.1.1, 5.15.0-1049.56~20.04.1.1, 5.15.0-1047.54~20.04.1.1 |
| Ubuntu:18.04:LTS | linux-oem | 4.15.0-1002.3, 0, 4.15.0-1004.5 |
| Ubuntu:18.04:LTS | linux-raspi2 | 4.15.0-1006.7, 4.13.0-1008.8, 4.15.0-1030.32 |
| Ubuntu:18.04:LTS | linux | 4.15.0-43.46, 4.15.0-42.45, 4.15.0-39.42 |
| Ubuntu:16.04:LTS | linux | 4.3.0-6.17, 4.3.0-7.18, 4.4.0-6.21 |
| Ubuntu:16.04:LTS | linux-aws-hwe | 0, 4.15.0-1031.33~16.04.1, 4.15.0-1030.31~16.04.1 |
| Ubuntu:20.04:LTS | linux-gke | 5.4.0-1049.52, 5.4.0-1051.54, 5.4.0-1052.55 |
| Ubuntu:Pro:FIPS:16.04:LTS | linux-fips | 0, 4.4.0-1003.3, 4.4.0-1006.6 |
| Ubuntu:20.04:LTS | linux-azure-fde | 5.4.0-1085.90+cvm1.1, 5.4.0-1103.109+cvm1.1, 5.4.0-1100.106+cvm1.1 |
…and 15 more
Timeline
- Jul 26, 2018 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 24, 2021 EPSS Score
- Aug 26, 2021 EPSS Score
- Oct 29, 2021 EPSS Score
- Dec 31, 2021 EPSS Score
- Mar 5, 2022 EPSS Score
- May 8, 2022 EPSS Score
- Jul 10, 2022 EPSS Score
- Sep 13, 2022 EPSS Score
- Nov 15, 2022 EPSS Score
- Jan 18, 2023 EPSS Score
References
- https://bugzilla.kernel.org/show_bug.cgi?id=199403 third-party-advisory
- http://patchwork.ozlabs.org/patch/929239/ third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2018-10876 third-party-advisory
- https://ubuntu.com/security/CVE-2018-10876 advisory
- https://ubuntu.com/security/notices/USN-3753-1 advisory
- https://ubuntu.com/security/notices/USN-3753-2 advisory
- https://ubuntu.com/security/notices/USN-3871-1 advisory
- https://ubuntu.com/security/notices/USN-3871-3 advisory
- https://ubuntu.com/security/notices/USN-3871-4 advisory
- https://ubuntu.com/security/notices/USN-3871-5 advisory