In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfsattrshortformaddname in fs/xfs/libxfs/xfsattr.c mishandles ATTR_REPLACE operations with conversion of an attr from short to long form.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-18690.json"
[
{
"signature_type": "Function",
"target": {
"file": "fs/xfs/libxfs/xfs_attr.c",
"function": "xfs_attr_shortform_addname"
},
"deprecated": false,
"id": "CVE-2018-18690-0bd2e54b",
"signature_version": "v1",
"digest": {
"function_hash": "59315597051106392798903271245780176134",
"length": 639.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7b38460dc8e4eafba06c78f8e37099d3b34d473c"
},
{
"signature_type": "Line",
"target": {
"file": "fs/xfs/libxfs/xfs_attr.c"
},
"deprecated": false,
"id": "CVE-2018-18690-0e36b10d",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"56483370289215632691764608581100583618",
"267298743050349695503692194789014037440",
"310604029804945052505036417556479020176",
"143570425858980881511554428268766483158"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@7b38460dc8e4eafba06c78f8e37099d3b34d473c"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-18690.json"
[
{
"signature_type": "Line",
"target": {
"file": "fs/xfs/libxfs/xfs_attr.c"
},
"deprecated": false,
"id": "CVE-2018-18690-8003795f",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"56483370289215632691764608581100583618",
"267298743050349695503692194789014037440",
"310604029804945052505036417556479020176",
"143570425858980881511554428268766483158"
]
},
"source": "https://github.com/torvalds/linux/commit/7b38460dc8e4eafba06c78f8e37099d3b34d473c"
},
{
"signature_type": "Function",
"target": {
"file": "fs/xfs/libxfs/xfs_attr.c",
"function": "xfs_attr_shortform_addname"
},
"deprecated": false,
"id": "CVE-2018-18690-97395c17",
"signature_version": "v1",
"digest": {
"function_hash": "59315597051106392798903271245780176134",
"length": 639.0
},
"source": "https://github.com/torvalds/linux/commit/7b38460dc8e4eafba06c78f8e37099d3b34d473c"
}
]