CVE-2018-12928: Canonical Ubuntu Linux

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.

Affected products

• Canonical Ubuntu Linux: version 16.04.4 only
• Linux Linux Kernel: version 4.15 only

Published 2018-06-28. Last modified 2026-06-17.