Description
The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service (temporary system hang) by mounting a filesystem that has corrupted dir->i_size and dir->i_blocks values and performing (a) read or (b) write operations. NOTE: there are limited scenarios in which this crosses privilege boundaries.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | fai-kernels | 1.17+etch.23etch1 | DSA-1687-1 |
| Debian 4.0 | linux-2.6 | 2.6.18.dfsg.1-23etch1 | DSA-1687-1 |
| Debian 4.0 | linux-2.6.24 | 2.6.24-6~etchnhalf.7 | DSA-1681-1 |
| Debian 4.0 | user-mode-linux | 2.6.18-1um-2etch.23etch1 | DSA-1687-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-128.1.6.el5 | RHSA-2009:0326 |
| RHEL 4 | kernel +10 | 2.6.9-78.0.8.EL | RHSA-2008:0972 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 1 | kernel-rt +9 | 2.6.24.7-93.el5rt | RHSA-2009:0009 |
Advisories 5
- RHSA-2009:0326 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2008:0972 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1687-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1681-1 linux-2.6.24 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2009:0009 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- 32998 third-party-advisory
- [oss-security] 20080918 CVE-2008-3528 Linux kernel ext[234] directory corruption DoS mailing-list
- RHSA-2009:0326 vendor-advisory
- [linux-kernel] 20080918 Re: [PATCH 4/4] ext3: Avoid printk floods in the face of directory corruption mailing-list
- MDVSA-2008:224 vendor-advisory
- 37471 third-party-advisory
- [linux-kernel] 20080913 [PATCH 3/4] ext2: Avoid printk floods in the face of directory corruption mailing-list
- RHSA-2008:0972 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- SUSE-SA:2008:052 vendor-advisory
- 33758 third-party-advisory
- RHSA-2009:0009 vendor-advisory
- SUSE-SA:2008:053 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=459577
- kernel-errorreporting-dos(45720) vdb-entry
- SUSE-SA:2008:056 vendor-advisory
- USN-662-1 vendor-advisory
- 33586 third-party-advisory
- 32509 third-party-advisory
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components mailing-list
- 32709 third-party-advisory
- DSA-1687 vendor-advisory
- 32356 third-party-advisory
- oval:org.mitre.oval:def:8642 vdb-entry signature
- oval:org.mitre.oval:def:10852 vdb-entry signature
- http://wiki.rpath.com/Advisories:rPSA-2008-0316
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0316
- 32759 third-party-advisory
- [linux-kernel] 20080913 [PATCH 4/4] ext3: Avoid printk floods in the face of directory corruption mailing-list
- 33180 third-party-advisory
- 32370 third-party-advisory
- SUSE-SA:2008:051 vendor-advisory
- 32799 third-party-advisory
- SUSE-SA:2008:057 vendor-advisory
- SUSE-SR:2008:025 vendor-advisory
- DSA-1681 vendor-advisory
- ADV-2009-3316 vdb-entry
- 20081112 rPSA-2008-0316-1 kernel mailing-list