The _getdatablock function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow and loop) via crafted use of the open and fallocate system calls with an FSIOC_FIEMAP ioctl.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-18257.json"
[
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"85748435662207924724021897408150756126",
"313256885289030866402192193822912371996",
"84803645665881114831444647463207810572",
"14758416031322316125704560024295953414"
]
},
"id": "CVE-2017-18257-515b4273",
"target": {
"file": "fs/f2fs/data.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@b86e33075ed1909d8002745b56ecf73b833db143"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 510.0,
"function_hash": "178531219766203724080241707062664424274"
},
"id": "CVE-2017-18257-ba059d74",
"target": {
"file": "fs/f2fs/data.c",
"function": "__get_data_block"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@b86e33075ed1909d8002745b56ecf73b833db143"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-18257.json"
[
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"85748435662207924724021897408150756126",
"313256885289030866402192193822912371996",
"84803645665881114831444647463207810572",
"14758416031322316125704560024295953414"
]
},
"id": "CVE-2017-18257-060468ed",
"target": {
"file": "fs/f2fs/data.c"
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/b86e33075ed1909d8002745b56ecf73b833db143"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 510.0,
"function_hash": "178531219766203724080241707062664424274"
},
"id": "CVE-2017-18257-aa219ef6",
"target": {
"file": "fs/f2fs/data.c",
"function": "__get_data_block"
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/b86e33075ed1909d8002745b56ecf73b833db143"
}
]