Published: 03/07/2012 Updated: 13/02/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 437

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel prior to 3.3.1 does not properly handle the _Delay and _Unwritten buffer head states, which allows local users to cause a denial of service (system crash) by leveraging the presence of an ext4 filesystem that was mounted with a journal.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 3.0.25
linux linux kernel 3.1.2
linux linux kernel 3.0
linux linux kernel 3.2.19
linux linux kernel 3.0.22
linux linux kernel 3.0.5
linux linux kernel 3.2.18
linux linux kernel 3.1
linux linux kernel 3.2.5
linux linux kernel 3.0.18
linux linux kernel 3.0.6
linux linux kernel 3.0.11
linux linux kernel 3.0.34
linux linux kernel
linux linux kernel 3.0.32
linux linux kernel 3.2
linux linux kernel 3.2.16
linux linux kernel 3.0.19
linux linux kernel 3.0.4
linux linux kernel 3.0.27
linux linux kernel 3.2.11
linux linux kernel 3.0.23
linux linux kernel 3.2.10
linux linux kernel 3.0.8
linux linux kernel 3.2.14
linux linux kernel 3.0.33
linux linux kernel 3.0.28
linux linux kernel 3.2.4
linux linux kernel 3.0.13
linux linux kernel 3.2.9
linux linux kernel 3.0.10
linux linux kernel 3.2.15
linux linux kernel 3.0.1
linux linux kernel 3.1.6
linux linux kernel 3.2.20
linux linux kernel 3.2.6
linux linux kernel 3.2.2
linux linux kernel 3.0.17
linux linux kernel 3.1.3
linux linux kernel 3.1.9
linux linux kernel 3.0.16
linux linux kernel 3.2.13
linux linux kernel 3.0.21
linux linux kernel 3.0.7
linux linux kernel 3.1.5
linux linux kernel 3.1.8
linux linux kernel 3.2.1
linux linux kernel 3.2.7
linux linux kernel 3.0.20
linux linux kernel 3.0.24
linux linux kernel 3.0.15
linux linux kernel 3.0.2
linux linux kernel 3.1.7
linux linux kernel 3.1.1
linux linux kernel 3.0.12
linux linux kernel 3.2.17
linux linux kernel 3.2.8
linux linux kernel 3.1.10
linux linux kernel 3.0.3
linux linux kernel 3.0.9
linux linux kernel 3.0.26
linux linux kernel 3.1.4
linux linux kernel 3.0.30
linux linux kernel 3.0.31
linux linux kernel 3.0.29
linux linux kernel 3.2.12
linux linux kernel 3.0.14
linux linux kernel 3.2.3

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-4086 Eric Sandeen reported an issue in the journaling layer for ext4 filesystems (jbd2) Local users can cause buffers to ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and two bugs arenow available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant security ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel-rt packages that fix two security issues and various bugsare now available for Red Hat Enterprise MRG 21The Red Hat Security Response Team has rated this update as havingimportant secu ...

Synopsis Moderate: kernel security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated kernel packages that fix two security issues and several bugs arenow available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impa ...

The journal_unmap_buffer function in fs/jbd2/transactionc in the Linux kernel before 331 does not properly handle the _Delay and _Unwritten buffer head states, which allows local users to cause a denial of service (system crash) by leveraging the presence of an ext4 filesystem that was mounted with a journal ...

The system could be made to crash or become unresponsive under certain conditions ...

Several security issues were fixed in the kernel ...

CWE-119 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.1 https://bugzilla.redhat.com/show_bug.cgi?id=749143 https://github.com/torvalds/linux/commit/15291164b22a357cb211b618adfef4fa82fc0de3 http://secunia.com/advisories/48898 http://secunia.com/advisories/48964 http://www.debian.org/security/2012/dsa-2469 http://rhn.redhat.com/errata/RHSA-2012-0670.html http://rhn.redhat.com/errata/RHSA-2012-0571.html http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=15291164b22a357cb211b618adfef4fa82fc0de3 https://nvd.nist.gov https://www.debian.org/security/./dsa-2469 https://usn.ubuntu.com/1454-1/

Get Started

CVE-2011-4086

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect