PT-2011-4030 · Linux+1 · Linux Kernel+1
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 3.0-rc1
Description
The issue allows local users to cause a denial of service, resulting in a system crash, by arranging for all resource groups to have too little free space. This is due to the gfs2 fallocate function in fs/gfs2/file.c not ensuring that the size of a chunk allocation is a multiple of the block size.
Recommendations
For Linux kernel versions prior to 3.0-rc1, update to version 3.0-rc1 or later to resolve the issue. As a temporary workaround, consider restricting access to the gfs2 fallocate function to minimize the risk of exploitation.
Fix
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat