The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 2.6.32-git6 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value).
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 13, 2009 |
| Suse | — | Upgrade ext4dev-kmp-xenUpgrade kernel-default-baseUpgrade kernel-vmiUpgrade kernel-paeUpgrade kernel-defaultUpgrade kernel-xen-baseUpgrade kernel-ppc64Upgrade kernel-kdumpUpgrade kernel-vmi-baseUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-ppc64-baseUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-ppc64Upgrade iscsitarget-kmp-defaultUpgrade kernel-pae-baseUpgrade ext4dev-kmp-vmiUpgrade ext4dev-kmp-paeUpgrade oracleasm-kmp-defaultUpgrade kernel-sourceUpgrade kernel-xen | Feb 17, 2015 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub