Description
The gfs2_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs_lock function in the Linux kernel on Red Hat Enterprise Linux (RHEL) 5 and 6, does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a denial of service (BUG and system crash) by locking a file on a (1) GFS or (2) GFS2 filesystem, and then changing this file's permissions.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-22lenny1 | DSA-2053-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +11 | 2.6.18-194.el5 | RHSA-2010:0178 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Global File System 4 | GFS-kernel +5 | 2.6.9-85.2.el4_8.10 | RHSA-2010:0331 |
| Red Hat Rhel Global File System 3 | GFS +4 | 6.0.2.36-13 | RHSA-2010:0330 |
| Red Hat Rhel Cluster Storage 5 | gfs-kmod +3 | 0.1.34-2.el5_4.3 | RHSA-2010:0521, RHSA-2010:0291 |
| RHEL 5.4 EUS | kernel +11 | 2.6.18-164.17.1.el5 | RHSA-2010:0380 |
Advisories 7
- RHSA-2010:0521 Red Hat Security Advisory: gfs-kmod security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0380 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0331 Red Hat Security Advisory: GFS-kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0291 Red Hat Security Advisory: gfs-kmod security, bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0330 Red Hat Security Advisory: GFS security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0178 Red Hat Security Advisory: Red Hat Enterprise Linux 5.5 kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-2053-1 linux-2.6 - several issues Debian Security (DSA / DLA) · Mar 9, 2026
References
- RHSA-2010:0330 vendor-advisory
- [oss-security] 20100312 CVE-2010-0727 kernel: gfs/gfs2 locking code DoS flaw mailing-list
- RHSA-2010:0380 vendor-advisory
- [linux-kernel] 20100311 [PATCH 3/3] GFS2: Skip check for mandatory locks when unlocking mailing-list
- oval:org.mitre.oval:def:11392 vdb-entry signature
- 1023809 vdb-entry
- MDVSA-2010:066 vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.34-rc1-next-20100312.bz2
- DSA-2053 vendor-advisory
- RHSA-2010:0521 vendor-advisory
- 39830 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=570863