The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS) by arranging for crafted values to be present in available memory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernelUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-devel | Dec 1, 2016 | Feb 27, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 27, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.24-23-powerpc64-smp | Nov 8, 2024 | Feb 27, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Feb 27, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub