The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test.
CVSS Details
- CVSS 3.1 Base Score: 4.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Apr 29, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 29, 2013 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-sourceUpgrade ext4dev-kmp-traceUpgrade ext4dev-kmp-defaultUpgrade kernel-pae-develUpgrade kernel-traceUpgrade kernel-paeUpgrade hyper-v-kmp-paeUpgrade kernel-ec2Upgrade hyper-v-kmp-traceUpgrade hyper-v-kmp-defaultUpgrade kernel-default-develUpgrade xen-kmp-traceUpgrade kernel-pae-baseUpgrade ext4dev-kmp-paeUpgrade kernel-default-manUpgrade ext4dev-kmp-xenUpgrade kernel-trace-develUpgrade kernel-defaultUpgrade btrfs-kmp-xenUpgrade btrfs-kmp-paeUpgrade btrfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-xen-develUpgrade kernel-ec2-baseUpgrade kernel-trace-baseUpgrade kernel-symsUpgrade xen-kmp-defaultUpgrade kernel-xen-baseUpgrade xen-kmp-paeUpgrade kernel-xen | Jan 12, 2015 | Apr 29, 2013 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Apr 29, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub