The ext4_fill_super function in fs/ext4/super.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate the superblock configuration, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) by attempting to mount a crafted ext4 filesystem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debug | Dec 1, 2016 | Feb 27, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 27, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.27-11-generic | Nov 8, 2024 | Feb 27, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Feb 27, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub