The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-xenUpgrade ext4dev-kmp-vmiUpgrade kernel-paeUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-symsUpgrade kernel-pae-baseUpgrade kernel-vmiUpgrade iscsitarget-kmp-defaultUpgrade ext4dev-kmp-defaultUpgrade kernel-ppc64-baseUpgrade kernel-vmi-baseUpgrade kernel-kdumpUpgrade kernel-defaultUpgrade ext4dev-kmp-ppc64Upgrade oracleasm-kmp-defaultUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade ext4dev-kmp-paeUpgrade kernel-ppc64Upgrade ext4dev-kmp-xen | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.28-13-virtualUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.28-13-versatileUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.28-13-ixp4xxUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.28-13-lpiaUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.28-13-iop32xUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.28-13-genericUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.28-13-serverUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.28-13-imx51Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.24-24-hppa64 | Nov 8, 2024 | Jun 8, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub