CVE - CVE-2011-2689

CVE-ID
CVE-2011-2689	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1025776 URL:http://securitytracker.com/id?1025776 MISC:45193 URL:http://secunia.com/advisories/45193 MISC:48677 URL:http://www.securityfocus.com/bid/48677 MISC:HPSBGN02970 URL:http://marc.info/?l=bugtraq&m=139447903326211&w=2 MISC:RHSA-2011:1065 URL:http://rhn.redhat.com/errata/RHSA-2011-1065.html MISC:[oss-security] 20110713 CVE-2011-2689 kernel: gfs2: make sure fallocate bytes is a multiple of blksize URL:http://www.openwall.com/lists/oss-security/2011/07/13/1 MISC:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6905d9e4dda6112f007e9090bca80507da158e63 URL:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6905d9e4dda6112f007e9090bca80507da158e63 MISC:http://www.kernel.org/pub/linux/kernel/v3.0/testing/ChangeLog-3.0-rc1 URL:http://www.kernel.org/pub/linux/kernel/v3.0/testing/ChangeLog-3.0-rc1 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=720861 URL:https://bugzilla.redhat.com/show_bug.cgi?id=720861 MISC:linux-kernel-gfs2-dos(68557) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/68557
Assigning CNA
Red Hat, Inc.
Date Record Created
20110711	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20110711)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)