CVE-2018-12931: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.

Affected products

• Canonical Ubuntu Linux: version 16.04.4 only
• Linux Linux Kernel: version 4.15 only

Published 2018-06-28. Last modified 2026-06-17.