CVEvulnerability

CVE-2012-2100

7.1 HIGH Published 2012-07-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-07-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-189

Description

The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.

Affected configurations

• linux linux kernel (<= 3.2.1) • linux linux kernel 3.2

Related

Weakness · not in database (1)

Referenced by CWE · observed example (1)

  • CWE-1335 Incorrect Bitwise Shift of Integer weakness

References