Security tracker / CVE-2018-12928

CVE-2018-12928

NULL deref in hfs_ext_read_extent()

References

• Debian security tracker
• cve.org
• https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1763384
• https://marc.info/?l=linux-fsdevel&m=152407263325766&w=2

Notes

 jmm> Matthew Wilcox recommends disabling it, might be worth considering for buster
 bwh> I'm very hesistant to remove support for filesystems
 bwh> without a FUSE-based alternative (like we have for ntfs).  I do
 bwh> support restricting the set tried by "mount -t auto" and any
 bwh> other tools that do similar probing.

Bugs

Status

Branch	Status
upstream	needed
6.18-upstream-stable
6.17-upstream-stable
6.12-upstream-stable
6.6-upstream-stable
6.1-upstream-stable	needed
5.10-upstream-stable	needed
4.9-upstream-stable	ignored "EOL"
3.16-upstream-stable	ignored "EOL"
sid	needed
6.12-trixie-security	needed
6.1-bookworm-security	needed
5.10-bullseye-security	needed
4.9-stretch-security	ignored "EOL"
3.16-jessie-security	ignored "EOL"