← Back

CVE-2009-0748

nvd nist
Published: Feb 27, 2009Modified: Apr 23, 2026

JSON object

Loading...
4.9
Vector
AV:L/AC:L/Au:N/C:N/I:N/A:C
Exploitability: 3.9 / Impact: 6.9
Source: NVD

Description

The ext4_fill_super function in fs/ext4/super.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate the superblock configuration, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) by attempting to mount a crafted ext4 filesystem.

Affected (42)

Products: Linux: Linux Kernel
Linux
1 product
Linux Kernel
Configuration A
42 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
Version 2.6.27.10
Linux Kernel
Version 2.6.27.11
Linux Kernel
Version 2.6.27.12
Linux Kernel
Version 2.6.27.13
Linux Kernel
Version 2.6.27.14
Linux Kernel
Version 2.6.27.15
Linux Kernel
Version 2.6.27.16
Linux Kernel
Version 2.6.27.17
Linux Kernel
Version 2.6.27.18
Linux Kernel
Version 2.6.27.1
Linux Kernel
Version 2.6.27.2
Linux Kernel
Version 2.6.27.3
Linux Kernel
Version 2.6.27.4
Linux Kernel
Version 2.6.27.5
Linux Kernel
Version 2.6.27.6
Linux Kernel
Version 2.6.27.7
Linux Kernel
Version 2.6.27.8
Linux Kernel
Version 2.6.27.9
Linux Kernel
Version 2.6.27
Linux Kernel
Version 2.6.27 rc1
Linux Kernel
Version 2.6.27 rc2
Linux Kernel
Version 2.6.27 rc3
Linux Kernel
Version 2.6.27 rc4
Linux Kernel
Version 2.6.27 rc5
Linux Kernel
Version 2.6.27 rc6
Linux Kernel
Version 2.6.27 rc7
Linux Kernel
Version 2.6.27 rc8
Linux Kernel
Version 2.6.27 rc9
Linux Kernel
Version 2.6.28.1
Linux Kernel
Version 2.6.28.2
Linux Kernel
Version 2.6.28.3
Linux Kernel
Version 2.6.28.4
Linux Kernel
Version 2.6.28.5
Linux Kernel
Version 2.6.28.6
Linux Kernel
Version 2.6.28
Linux Kernel
Version 2.6.28 rc1
Linux Kernel
Version 2.6.28 rc2
Linux Kernel
Version 2.6.28 rc3
Linux Kernel
Version 2.6.28 rc4
Linux Kernel
Version 2.6.28 rc5
Linux Kernel
Version 2.6.28 rc6
Linux Kernel
Version 2.6.28 rc7

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (34)

Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.