CVE-2009-1961: Race Condition
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the genericfilesplicewrite, splicefrompipe, and ocfs2filesplicewrite functions.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1961?
CVE-2009-1961 has been classified as a moderate severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2009-1961?
To fix CVE-2009-1961, upgrade the Linux kernel to a version later than 2.6.30-rc3 or apply the provided patches.
Which Linux kernel versions are affected by CVE-2009-1961?
CVE-2009-1961 affects Linux kernel versions from 2.6.19 up to and including 2.6.30-rc2.
Can CVE-2009-1961 be exploited locally?
Yes, CVE-2009-1961 can be exploited by local users to cause a denial of service.
What types of systems are impacted by CVE-2009-1961?
CVE-2009-1961 impacts various Linux distributions including Debian, Ubuntu, and openSUSE that use the affected kernel versions.