oss-sec mailing list archives
CVE-2008-3528 Linux kernel ext[234] directory corruption DoS
From: Eugene Teo <eteo () redhat com>
Date: Thu, 18 Sep 2008 13:41:01 +0800
The ext[234] filesystem code fails to properly handle corrupted data structures. With a mounted filesystem image or partition that have corrupted dir->i_size and dir->i_blocks, a user performing either a read or write operation on the mounted image or partition can lead to a possible denial of service. References: https://bugzilla.redhat.com/show_bug.cgi?id=459577 http://lkml.org/lkml/2008/9/13/98 http://lkml.org/lkml/2008/9/13/99 http://lkml.org/lkml/2008/9/17/371 The issue is not fixed upstream yet, but the patch has been added to -mm tree. I will update this email as soon as I know the commit hashes. This issue has been allocated with CVE-2008-3528. Thanks, Eugene -- Eugene Teo / Red Hat Security Response Team
Current thread:
- CVE-2008-3528 Linux kernel ext[234] directory corruption DoS Eugene Teo (Sep 17)