The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service (temporary system hang) by mounting a filesystem that has corrupted dir->i_size and dir->i_blocks values and performing (a) read or (b) write operations. NOTE: there are limited scenarios in which this crosses privilege boundaries.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-xenU-develUpgrade kernel-smp-develUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-hugememUpgrade kernelUpgrade kernel-smpUpgrade kernel-debuginfo-commonUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-xenUpgrade kernel-xen-debuginfoUpgrade kernel-PAE-debuginfoUpgrade kernel-xenUUpgrade kernel-hugemem-devel | Dec 1, 2016 | Sep 27, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 27, 2008 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ppc64-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade kernel-traceUpgrade kernel-xen-develUpgrade kernel-sourceUpgrade kernel-trace-develUpgrade kernel-default-develUpgrade kernel-xen-baseUpgrade kernel-paeUpgrade kernel-pae-baseUpgrade kernel-pae-develUpgrade kernel-xenUpgrade kernel-ppc64Upgrade kernel-trace-baseUpgrade kernel-default-man | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.27-7-serverUpgrade linux-image-2.6.27-7-virtualUpgrade linux-image-2.6.27-7-generic | Nov 8, 2024 | Sep 27, 2008 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Sep 27, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub