CVE-2009-1961

Published: Jun 8, 2009Modified: Apr 23, 2026

4.7

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.0 / Impact: 3.6

Source: NVD

Description

The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.

Affected (15)

Products: Linux: Linux Kernel · Debian: Debian Linux · Canonical: Ubuntu Linux · +2 more

Show all products

Linux: Linux Kernel · Debian: Debian Linux · Canonical: Ubuntu Linux · Opensuse: Opensuse · Suse: Linux Enterprise, Linux Enterprise Desktop, Linux Enterprise Server

1 product

1 product

1 product

1 product

3 products

Linux Enterprise Desktop

Linux Enterprise Server

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.19
Linux Linux Kernel	From 2.6.27 to 2.6.27.24
Linux Linux Kernel	From 2.6.29 to 2.6.29.4
Linux Linux Kernel	Version 2.6.30 rc1
Linux Linux Kernel	Version 2.6.30 rc2

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 8.10
Canonical Ubuntu Linux	Version 9.04

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 10.3
Opensuse Opensuse	Version 11.1
Suse Linux Enterprise	Version 11.0
Suse Linux Enterprise Desktop	Version 11
Suse Linux Enterprise Server	Version 11

Related CWEs

CWE-667

Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

References (40)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=7bfac9ecf0585962fe13584f5cf526d8c8e76f17

Source: cve@mitre.org

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html

Source: cve@mitre.org

Mailing List

http://secunia.com/advisories/35390

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/35394

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/35656

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/35847

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/36051

Source: cve@mitre.org

Broken Link

http://securitytracker.com/id?1022307

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.debian.org/security/2009/dsa-1844

Source: cve@mitre.org

Mailing ListPatch

http://www.mandriva.com/security/advisories?name=MDVSA-2009:135

Source: cve@mitre.org

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2009:148

Source: cve@mitre.org

Broken Link

http://www.openwall.com/lists/oss-security/2009/05/29/2

Source: cve@mitre.org

Mailing ListPatch

http://www.openwall.com/lists/oss-security/2009/05/30/1

Source: cve@mitre.org

ExploitMailing ListPatch

http://www.openwall.com/lists/oss-security/2009/06/02/2

Source: cve@mitre.org

ExploitMailing List

http://www.openwall.com/lists/oss-security/2009/06/03/1

Source: cve@mitre.org

ExploitMailing List

http://www.redhat.com/support/errata/RHSA-2009-1157.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/35143

Source: cve@mitre.org

Broken LinkExploitThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-793-1

Source: cve@mitre.org

Third Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=7bfac9ecf0585962fe13584f5cf526d8c8e76f17