The ext4_isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the i_size_high structure member during operations on arbitrary types of files, which allows local users to cause a denial of service (CPU consumption and error-message flood) by attempting to mount a crafted ext4 filesystem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel | Dec 1, 2016 | Feb 27, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 27, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.24-23-openvz | Nov 8, 2024 | Feb 27, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Feb 27, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub