FlawAtlas
Search the atlas
USN-4144-1 Not scored

linux, linux-aws, linux-aws-hwe, linux-azure, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that the XFS file system in the Linux kernel did not properly handle mount failures in some situations. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2018-20976) Benjamin Moody discovered that the XFS file system in the Linux kernel did not properly handle an error condition when out of disk quota. A local attacker could possibly use this to cause a denial of service. (CVE-2019-15538)

Exploit probability Not scored
Published October 1, 2019
Required by Not available
Last source change June 3, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:16.04:LTS linux-aws-hwe

15 explicit affected versions

Ubuntu:16.04:LTS linux-azure

45 explicit affected versions

Ubuntu:16.04:LTS linux-hwe

58 explicit affected versions

Ubuntu:16.04:LTS linux-oracle

14 explicit affected versions

Ubuntu:18.04:LTS linux

37 explicit affected versions

Ubuntu:18.04:LTS linux-aws

32 explicit affected versions

Ubuntu:18.04:LTS linux-kvm

31 explicit affected versions

Ubuntu:18.04:LTS linux-oem

25 explicit affected versions

Ubuntu:18.04:LTS linux-oracle

14 explicit affected versions

Ubuntu:18.04:LTS linux-raspi2

33 explicit affected versions

Ubuntu:18.04:LTS linux-snapdragon

12 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities USN-4144-1

It was discovered that the XFS file system in the Linux kernel did not properly handle mount failures in some situations. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2018-20976) Benjamin Moody discovered that the XFS file system in the Linux kernel did not properly handle an error condition when out of disk quota. A local attacker could possibly use this to cause a denial of service. (CVE-2019-15538)

View original source

05 / REFERENCES

Further evidence