Description
The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS) by arranging for crafted values to be present in available memory.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-13lenny2 | DSA-1749-1 |
| Debian 4.0 | linux-2.6.24 | 2.6.24-6~etchnhalf.8etch1 | DSA-1787-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-164.el5 | RHSA-2009:1243 |
Advisories 3
- RHSA-2009:1243 Red Hat Security Advisory: Red Hat Enterprise Linux 5.4 kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1787-1 linux-2.6.24 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1749-1 linux-2.6 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdff73f094e7220602cc3f8959c7230517976412
- ADV-2009-0509 vdb-entry
- 37471 third-party-advisory
- RHSA-2009:1243 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- DSA-1749 vendor-advisory
- oval:org.mitre.oval:def:7765 vdb-entry signature
- oval:org.mitre.oval:def:10942 vdb-entry signature
- USN-751-1 vendor-advisory
- http://bugzilla.kernel.org/show_bug.cgi?id=12433
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components mailing-list
- 36562 third-party-advisory
- 34981 third-party-advisory
- 34394 third-party-advisory
- DSA-1787 vendor-advisory
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7
- ADV-2009-3316 vdb-entry