Description
The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +14 | 2.6.32-131.12.1.el6 | RHSA-2011:1189 |
| RHEL 5 | kernel +12 | 2.6.18-274.el5 | RHSA-2011:1065 |
Advisories 2
- RHSA-2011:1189 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2011:1065 Red Hat Security Advisory: Red Hat Enterprise Linux 5.7 kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- [oss-security] 20110713 CVE-2011-2689 kernel: gfs2: make sure fallocate bytes is a multiple of blksize mailing-list
- RHSA-2011:1065 vendor-advisory
- linux-kernel-gfs2-dos(68557) vdb-entry
- 1025776 vdb-entry
- 48677 vdb-entry
- http://www.kernel.org/pub/linux/kernel/v3.0/testing/ChangeLog-3.0-rc1
- 45193 third-party-advisory
- HPSBGN02970 vendor-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6905d9e4dda6112f007e9090bca80507da158e63
- https://bugzilla.redhat.com/show_bug.cgi?id=720861