Vulnerability in Linux Kernel

CVE-2011-2695

Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsigned integer.

EPSS: 0.005 (36.9th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel — versions 3.0
N/a — versions n/a

Weakness classification (CWE)

CWE-193 — Off-by-one Error

References

secalert@redhat.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Exploit, Patch, Third Party Advisory)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Broken Link)
secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)