CVE-2011-2695

Published: Jul 28, 2011Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsigned integer.

Affected (6)

Products: Linux: Linux Kernel

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.0
Linux Linux Kernel	Version 3.0
Linux Linux Kernel	Version 3.0 rc1
Linux Linux Kernel	Version 3.0 rc2
Linux Linux Kernel	Version 3.0 rc3
Linux Linux Kernel	Version 3.0 rc4

Related CWEs

Off-by-one Error

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

References (14)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f17722f917b2f21497deb6edc62fb1683daa08e6

Source: secalert@redhat.com

http://secunia.com/advisories/45193

Source: secalert@redhat.com

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v3.0/testing/ChangeLog-3.0-rc5

Source: secalert@redhat.com

Broken Link

http://www.openwall.com/lists/oss-security/2011/07/15/7

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/07/15/8

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.spinics.net/lists/linux-ext4/msg25697.html

Source: secalert@redhat.com

ExploitPatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=722557

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f17722f917b2f21497deb6edc62fb1683daa08e6

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/45193

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v3.0/testing/ChangeLog-3.0-rc5

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.openwall.com/lists/oss-security/2011/07/15/7

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/07/15/8

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.spinics.net/lists/linux-ext4/msg25697.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=722557

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

Timeline

No history available yet.