The xfsbmapextentstobtree function in fs/xfs/libxfs/xfsbmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfsbmapi_write NULL pointer dereference) via a crafted xfs image.
{ "urgency": "not yet assigned" }