CVE-2010-1436

Linux kernel 2.6.18 - Denial of Service via GFS2 Quota Struct Out-of-Bounds Write

Title source: llm
STIX 2.1

Description

gfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the gfs2_quota struct occupies two separate pages, which allows local users to cause a denial of service (kernel panic) via certain manipulations that cause an out-of-bounds write, as demonstrated by writing from an ext3 file system to a gfs2 file system.

References (8)

Core 8
Core References
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/04/27/1
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/58839
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/04/28/1
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10652
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43315
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/516397/100/0/threaded

Scores

EPSS 0.0044
EPSS Percentile 36.4%

Details

CWE
CWE-399
Status published
Products (1)
linux/linux_kernel 2.6.18
Published May 21, 2010
Tracked Since Feb 18, 2026