Description
The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-13lenny2 | DSA-1749-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-164.el5 | RHSA-2009:1243 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Linux Kernel 2.6.x - 'make_indexed_dir()' Local Denial of Service EDB-32775 · dos · Feb 16, 2009 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- RHSA-2009:1243 Red Hat Security Advisory: Red Hat Enterprise Linux 5.4 kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1749-1 linux-2.6 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- oval:org.mitre.oval:def:8039 vdb-entry signature
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19
- ADV-2009-0509 vdb-entry
- 37471 third-party-advisory
- RHSA-2009:1243 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- linux-kernel-makeindexeddir-ext4-dos(48872) vdb-entry
- DSA-1749 vendor-advisory
- 52202 vdb-entry
- USN-751-1 vendor-advisory
- http://bugzilla.kernel.org/show_bug.cgi?id=12430
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components mailing-list
- 36562 third-party-advisory
- 34394 third-party-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7
- oval:org.mitre.oval:def:10342 vdb-entry signature
- ADV-2009-3316 vdb-entry