Description
A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | GlusterFS | Prior to 3.10 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | glusterfs | 3.12.2-2 | — |
| Debian 13 | glusterfs | 3.12.2-2 | — |
| Debian 12 | glusterfs | 3.12.2-2 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | glusterfs +8 | 6.0-21.el7 | RHEA-2019:3249 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Gluster Storage 3 | glusterfs +9 | 6.0-21.el7 | RHEA-2019:3249 |
| Red Hat Gluster Storage 3 | glusterfs-events +4 | 6.0-21.el7rhgs | RHEA-2019:3249 |
| Red Hat Gluster Storage 3 | redhat-release-server | 7.7-16.el7rhgs | RHEA-2019:3249 |
| Red Hat Gluster Storage 3 | redhat-storage-logos | 70.7.0-3.el7rhgs | RHEA-2019:3249 |
| Red Hat Gluster Storage 3 | redhat-storage-server | 3.5.0.0-1.el7rhgs | RHEA-2019:3249 |
Advisories 1
- RHEA-2019:3249 Red Hat Enhancement Advisory: glusterfs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026