Description
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | fai-kernels | 1.9.1sarge4 | DSA-1184-2 |
| Debian 3.1 | kernel-source-2.6.8 | 2.6.8-16sarge5 | DSA-1184-2 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +10 | 2.6.9-78.EL | RHSA-2008:0665 |
Advisories 2
- RHSA-2008:0665 Red Hat Security Advisory: Updated kernel packages for Red Hat Enterprise Linux 4.7 Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1184-2 kernel-source-2.6.8 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 21934 third-party-advisory
- MDKSA-2007:025 vendor-advisory
- SUSE-SA:2006:079 vendor-advisory
- 27227 third-party-advisory
- SUSE-SA:2007:053 vendor-advisory
- 21695 third-party-advisory
- oval:org.mitre.oval:def:10796 vdb-entry signature
- 31685 third-party-advisory
- http://lkml.org/lkml/2006/6/16/6
- RHSA-2008:0665 vendor-advisory
- MDKSA-2006:182 vendor-advisory
- 22382 third-party-advisory
- 23474 third-party-advisory
- ADV-2006-3308 vdb-entry
- USN-346-1 vendor-advisory
- https://issues.rpath.com/browse/RPL-611
- 21515 third-party-advisory
- 20060831 rPSA-2006-0162-1 kernel mailing-list
- 19562 vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2008-365.htm
- 22093 third-party-advisory
- 21711 third-party-advisory
- DSA-1184 vendor-advisory
- 31229 third-party-advisory