Buffer overflow in Linux Kernel

CVE-2011-4086

The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _Unwritten buffer head states, which allows local users to cause a denial of service (system crash) by leveraging the presence of an ext4 filesystem that was mounted with a journal.

Vulnerability class: Buffer Overflow

EPSS: 0.004 (31.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References