cve/2018/CVE-2018-13095.md

CVE-2018-13095

Description

An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.

POC

Reference

• https://bugzilla.kernel.org/show_bug.cgi?id=199915
• https://bugzilla.kernel.org/show_bug.cgi?id=199915

Github

• https://github.com/ARPSyndicate/cvemon