Description
Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.
References (11)
Scores
EPSS
0.0005
EPSS Percentile
14.1%
Details
CWE
CWE-193
Status
published
Products (6)
canonical/ubuntu_linux
6.06
canonical/ubuntu_linux
7.10
canonical/ubuntu_linux
8.04
debian/debian_linux
4.0
linux/linux_kernel
2.6.27 (2 CPE variants)
linux/linux_kernel
< 2.6.27
Published
Aug 08, 2008
Tracked Since
Feb 18, 2026