CVE-2009-0745

Published: Feb 27, 2009Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS) by arranging for crafted values to be present in available memory.

Affected (26)

Products: Linux: Linux Kernel

1 product

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.27.10
Linux Linux Kernel	Version 2.6.27.11
Linux Linux Kernel	Version 2.6.27.12
Linux Linux Kernel	Version 2.6.27.13
Linux Linux Kernel	Version 2.6.27.14
Linux Linux Kernel	Version 2.6.27.15
Linux Linux Kernel	Version 2.6.27.16
Linux Linux Kernel	Version 2.6.27.17
Linux Linux Kernel	Version 2.6.27.18
Linux Linux Kernel	Version 2.6.27.1
Linux Linux Kernel	Version 2.6.27.2
Linux Linux Kernel	Version 2.6.27.3
Linux Linux Kernel	Version 2.6.27.4
Linux Linux Kernel	Version 2.6.27.5
Linux Linux Kernel	Version 2.6.27.6
Linux Linux Kernel	Version 2.6.27.7
Linux Linux Kernel	Version 2.6.27.8
Linux Linux Kernel	Version 2.6.27.9
Linux Linux Kernel	Version 2.6.27
Linux Linux Kernel	Version 2.6.28.1
Linux Linux Kernel	Version 2.6.28.2
Linux Linux Kernel	Version 2.6.28.3
Linux Linux Kernel	Version 2.6.28.4
Linux Linux Kernel	Version 2.6.28.5
Linux Linux Kernel	Version 2.6.28.6
Linux Linux Kernel	Version 2.6.28

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (36)

http://bugzilla.kernel.org/show_bug.cgi?id=12433

Source: cve@mitre.org

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdff73f094e7220602cc3f8959c7230517976412

Source: cve@mitre.org

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19

Source: cve@mitre.org

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2009-1243.html

Source: cve@mitre.org

http://secunia.com/advisories/34394

Source: cve@mitre.org

http://secunia.com/advisories/34981

Source: cve@mitre.org

http://secunia.com/advisories/36562

Source: cve@mitre.org

http://secunia.com/advisories/37471

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1749

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1787

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-751-1

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/0509

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10942

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7765

Source: cve@mitre.org

http://bugzilla.kernel.org/show_bug.cgi?id=12433

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdff73f094e7220602cc3f8959c7230517976412

Source: af854a3a-2127-422b-91ae-364da2661108

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19

Source: af854a3a-2127-422b-91ae-364da2661108

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2009-1243.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34394

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34981

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36562

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37471

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1749

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1787

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-751-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/0509

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2009/3316

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10942

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7765

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.