CVE-2018-12929: Canonical Ubuntu Linux

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via a crafted ntfs filesystem.

Affected products

• Canonical Ubuntu Linux: version 16.04.4 only
• Linux Linux Kernel: version 4.15 only

Published 2018-06-28. Last modified 2026-06-17.