The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kernel-xen-develUpgrade kernel-docUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-xenUpgrade kernel-headersUpgrade kernelUpgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-debug-develUpgrade kernel-debug | Dec 1, 2016 | Jul 3, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 3, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 10, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-39-386Upgrade linux-image-2.6.32-39-sparc64-smpUpgrade linux-image-2.6.32-39-genericUpgrade linux-image-2.6.32-39-powerpc-smpUpgrade linux-image-2.6.32-343-ec2Upgrade linux-image-3.0.0-16-powerpc-smpUpgrade linux-image-3.0.0-16-omapUpgrade linux-image-2.6.32-39-generic-paeUpgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-2.6.32-39-serverUpgrade linux-image-2.6.32-39-sparc64Upgrade linux-image-2.6.32-39-powerpc64-smpUpgrade linux-image-2.6.38-15-versatileUpgrade linux-image-3.0.0-16-virtualUpgrade linux-image-3.0.0-16-serverUpgrade linux-image-3.0.0-1208-omap4Upgrade linux-image-3.0.0-16-powerpc64-smpUpgrade linux-image-3.0.0-16-generic-paeUpgrade linux-image-2.6.32-39-ia64Upgrade linux-image-2.6.32-39-lpiaUpgrade linux-image-3.0.0-16-genericUpgrade linux-image-2.6.38-15-serverUpgrade linux-image-2.6.32-39-powerpcUpgrade linux-image-2.6.38-15-powerpc-smpUpgrade linux-image-2.6.32-39-virtualUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-15-virtualUpgrade linux-image-2.6.32-39-versatileUpgrade linux-image-2.6.38-15-omapUpgrade linux-image-2.6.38-15-powerpcUpgrade linux-image-2.6.38-15-powerpc64-smpUpgrade linux-image-2.6.32-39-preemptUpgrade linux-image-3.0.0-16-powerpcUpgrade linux-image-2.6.38-15-generic | Nov 8, 2024 | Jul 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub