CVEvulnerability

CVE-2009-1961

4.7 MEDIUM Published 2009-06-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-06-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-667

Description

The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.

Affected configurations

• linux linux kernel (<= 2.6.19) • linux linux kernel (>= 2.6.27 < 2.6.27.24) • linux linux kernel (>= 2.6.29 < 2.6.29.4) • linux linux kernel 2.6.30 • debian debian linux 4.0 • canonical ubuntu linux 6.06 • canonical ubuntu linux 8.04 • canonical ubuntu linux 8.10 • canonical ubuntu linux 9.04 • opensuse opensuse 10.3 • opensuse opensuse 11.1 • suse linux enterprise 11.0 • suse linux enterprise desktop 11 • suse linux enterprise server 11

Related

Weakness · CWE (1)

  • CWE-667 Improper Locking weakness

Referenced by CWE · observed example (2)

References