The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 6, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 21, 2013 |
| Suse | — | Upgrade kernel-pae-baseUpgrade iscsitarget-kmp-rtUpgrade kernel-bigsmpUpgrade cluster-network-kmp-paeUpgrade kernel-ec2Upgrade kernel-desktopUpgrade kernel-xen-baseUpgrade ofed-kmp-rtUpgrade kernel-trace-extraUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-debugUpgrade cluster-network-kmp-traceUpgrade kernel-develUpgrade kernel-paeUpgrade kernel-pae-develUpgrade kernel-bigsmp-baseUpgrade kernel-desktop-baseUpgrade kernel-traceUpgrade kernel-xen-extraUpgrade ocfs2-kmp-traceUpgrade kernel-trace-baseUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade lttng-modules-kmp-rtUpgrade ocfs2-kmp-rt_traceUpgrade ocfs2-kmp-xenUpgrade kernel-xenUpgrade drbd-kmp-rtUpgrade kernel-symsUpgrade kernel-trace-develUpgrade kernel-debug-develUpgrade gfs2-kmp-paeUpgrade lttng-modules-kmp-rt_traceUpgrade drbd-kmp-rt_traceUpgrade cluster-network-kmp-xenUpgrade ocfs2-kmp-rtUpgrade kernel-xen-develUpgrade kernel-sourceUpgrade kernel-vanillaUpgrade kernel-rt-baseUpgrade kernel-default-extraUpgrade kernel-vanilla-develUpgrade kernel-rtUpgrade xen-kmp-defaultUpgrade ocfs2-kmp-bigsmpUpgrade kernel-rt_traceUpgrade cluster-network-kmp-bigsmpUpgrade kernel-ppc64Upgrade cluster-network-kmp-rtUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-ppc64Upgrade kernel-bigsmp-develUpgrade ofed-kmp-rt_traceUpgrade gfs2-kmp-traceUpgrade ocfs2-kmp-defaultUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-ec2-baseUpgrade gfs2-kmp-bigsmpUpgrade ocfs2-kmp-paeUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-ppc64-develUpgrade kernel-syms-rtUpgrade kernel-debug-baseUpgrade kernel-rt_trace-develUpgrade kernel-pae-extraUpgrade cluster-network-kmp-rt_traceUpgrade sle-hae-releaseUpgrade kernel-desktop-develUpgrade kernel-rt_trace-baseUpgrade gfs2-kmp-ppc64Upgrade kernel-default-baseUpgrade kernel-docsUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-source-vanillaUpgrade gfs2-kmp-xenUpgrade kernel-ppc64-baseUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade xen-kmp-paeUpgrade cluster-network-kmp-ppc64Upgrade xen-kmp-trace | Feb 17, 2015 | Mar 6, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-233-omap4Upgrade linux-image-3.2.0-54-highbankUpgrade linux-image-3.5.0-41-genericUpgrade linux-image-3.5.0-41-powerpc-smpUpgrade linux-image-3.5.0-41-powerpc64-smpUpgrade linux-image-3.5.0-41-omapUpgrade linux-image-3.2.0-54-powerpc64-smpUpgrade linux-image-3.2.0-54-powerpc-smpUpgrade linux-image-3.2.0-54-generic-paeUpgrade linux-image-3.5.0-41-highbankUpgrade linux-image-3.2.0-1438-omap4Upgrade linux-image-3.2.0-54-virtualUpgrade linux-image-3.2.0-54-genericUpgrade linux-image-3.2.0-54-omap | Nov 8, 2024 | Mar 6, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub