The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade ext4dev-kmp-defaultUpgrade iscsitarget-kmp-defaultUpgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade oracleasm-kmp-defaultUpgrade kernel-ppc64Upgrade ext4dev-kmp-ppc64Upgrade ext4dev-kmp-xenUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-kdumpUpgrade ext4dev-kmp-paeUpgrade kernel-vmi-baseUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-sourceUpgrade ext4dev-kmp-vmiUpgrade kernel-paeUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-vmi | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.28-13-versatileUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.28-13-imx51Upgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.28-13-lpiaUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.28-13-serverUpgrade linux-image-2.6.28-13-iop32xUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.28-13-genericUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.28-13-ixp4xxUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.28-13-virtualUpgrade linux-image-2.6.15-54-powerpc64-smp | Nov 8, 2024 | Jun 8, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub