Improper input validation in Linux Kernel

CVE-2011-4132

The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and kernel oops) via an ext3 or ext4 image with an "invalid log first block value."

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.005 (39.3th percentile) — read the EPSS interpretation.