The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-xen-devel | Dec 1, 2016 | Feb 27, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 27, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.22-16-lpiacompat | Nov 8, 2024 | Feb 27, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Feb 27, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub