Description
The fallocate implementation in the GFS2 filesystem in the Linux kernel before 3.2 relies on the page cache, which might allow local users to cause a denial of service by preallocating blocks in certain situations involving insufficient memory.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 3.2.1-1 | — |
| Debian 13 | linux | 3.2.1-1 | — |
| Debian 12 | linux | 3.2.1-1 | — |
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=64dd153c83743af81f20924c6343652d731eeecb
- https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=fadca7bdc43b02f518585d9547019966415cadfd
- [cluster-devel] 20110912 [PATCH] GFS2: rewrite fallocate code to write blocks directly mailing-list
- https://github.com/torvalds/linux/commit/64dd153c83743af81f20924c6343652d731eeecb
- http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.2.bz2