Use After Free The advisory has been revoked - it doesn't affect any version of package linux-aws-6.18  (opens in a new tab)


Threat Intelligence

EPSS
0.77% (55th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CHAINGUARDLATEST-LINUXAWS618-14421239
  • published10 Jan 2026
  • disclosed26 Jul 2018

Introduced: 26 Jul 2018

CVE-2018-10876  (opens in a new tab)
CWE-416  (opens in a new tab)

Amendment

The Chainguard security team deemed this advisory irrelevant for Chainguard:latest.

NVD Description

Note: Versions mentioned in the description apply only to the upstream linux-aws-6.18 package and not the linux-aws-6.18 package as distributed by Chainguard.

A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image.