The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service (temporary system hang) by mounting a filesystem that has corrupted dir->i_size and dir->i_blocks values and performing (a) read or (b) write operations. NOTE: there are limited scenarios in which this crosses privilege boundaries.
CVSS Details
- CVSS 3.1 Base Score: 4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-debuginfoUpgrade kernel-xenUUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-PAE-debuginfoUpgrade kernel-PAE-develUpgrade kernel-xenU-develUpgrade kernel-smp-develUpgrade kernel-headersUpgrade kernel-hugememUpgrade kernel-docUpgrade kernel-smpUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-hugemem-develUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-PAEUpgrade kernel-debuginfo-commonUpgrade kernel-debugUpgrade kernel-debuginfo | Dec 1, 2016 | Sep 27, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 27, 2008 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-traceUpgrade kernel-pae-develUpgrade kernel-trace-baseUpgrade kernel-default-manUpgrade kernel-trace-develUpgrade kernel-xenUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-pae-baseUpgrade kernel-paeUpgrade kernel-default-baseUpgrade kernel-ppc64-develUpgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade kernel-docs | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.27-7-virtualUpgrade linux-image-2.6.27-7-genericUpgrade linux-image-2.6.27-7-server | Nov 8, 2024 | Sep 27, 2008 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Sep 27, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub