CVE-2018-13100

An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secs_per_zone in a corrupted f2fs image, as demonstrated by a divide-by-zero error.

• CWE-369

• http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html
• http://packetstormsecurity.com/files/151420/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
• http://www.securityfocus.com/bid/104679Third Party Advisory, VDB Entry
• https://bugzilla.kernel.org/show_bug.cgi?id=200183Issue Tracking, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=42bf546c1fe3f3654bdf914e977acbc2b80a5be5
• https://lists.debian.org/debian-lts-announce/2019/03/msg00017.htmlThird Party Advisory
• https://seclists.org/bugtraq/2019/Jan/52
• https://usn.ubuntu.com/3932-1/
• https://usn.ubuntu.com/3932-2/
• https://usn.ubuntu.com/4094-1/
• https://usn.ubuntu.com/4118-1/
• http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html
• http://packetstormsecurity.com/files/151420/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
• http://www.securityfocus.com/bid/104679Third Party Advisory, VDB Entry
• https://bugzilla.kernel.org/show_bug.cgi?id=200183Issue Tracking, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=42bf546c1fe3f3654bdf914e977acbc2b80a5be5
• https://lists.debian.org/debian-lts-announce/2019/03/msg00017.htmlThird Party Advisory
• https://seclists.org/bugtraq/2019/Jan/52
• https://usn.ubuntu.com/3932-1/
• https://usn.ubuntu.com/3932-2/
• https://usn.ubuntu.com/4094-1/
• https://usn.ubuntu.com/4118-1/

Published

Jul 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13095An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in …
• CVE-2018-13096An issue was discovered in fs/f2fs/super.c in the Linux kern…5.5
• CVE-2018-13097An issue was discovered in fs/f2fs/super.c in the Linux kern…
• CVE-2018-13098An issue was discovered in fs/f2fs/inode.c in the Linux kern…
• CVE-2018-13099An issue was discovered in fs/f2fs/inline.c in the Linux ker…5.5
• CVE-2018-1310Apache NiFi JMS Deserialization issue because of ActiveMQ cl…
• CVE-2018-13101KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 suf…
• CVE-2018-13102AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a D…
• CVE-2018-13103OX App Suite 7.8.4 and earlier allows SSRF.
• CVE-2018-13104OX App Suite 7.8.4 and earlier allows XSS. Internal referenc…
• CVE-2018-13106ClipperCMS 1.3.3 has stored XSS via the "Tools -> Configurat…
• CVE-2018-13108All ADB broadband gateways / routers based on the Epicentro …