CVE-2018-13093: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 1.7% chance of exploitation in the next 30 days.

An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.

Affected products

• Linux Linux Kernel: up to and including 4.17.3

Published 2018-07-03. Last modified 2026-06-17.