CVE-2011-2695: Medium severity linux kernel vulnerability
If an extent exists which includes the block right before the maximum file offset, and the block for the maximum file offset is written, the kernel panics. For 4KB block size, the problem only occurs on x8664 architecture. For 1KB or 2KB block size, the problem occurs on both i386 and x8664.
Local unprivileged users can use this flaw to crash the system when ext4 filesystem is in use.
Upstream fix: http://git.kernel.org/linus/f17722f917b2f21497deb6edc62fb1683daa08e6
References: http://www.spinics.net/lists/linux-ext4/msg25697.html
Other sources
Multiple off-by-one errors in the ext4 subsystem in the Linux kernel b ...
— Debian
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2695?
CVE-2011-2695 has a high severity due to its potential to cause kernel panics on affected systems.
How do I fix CVE-2011-2695?
To fix CVE-2011-2695, users should upgrade to Linux kernel version 3.1 or later, as this vulnerability is addressed in those versions.
Which architectures are affected by CVE-2011-2695?
CVE-2011-2695 affects the x86_64 architecture for 4KB block sizes, and both i386 and x86_64 for 1KB or 2KB block sizes.
What conditions lead to the vulnerability in CVE-2011-2695?
The vulnerability in CVE-2011-2695 occurs when a block is written at the maximum file offset under certain extent conditions.
Is CVE-2011-2695 present in all versions of the Linux kernel up to 3.0?
Yes, CVE-2011-2695 is present in all versions of the Linux kernel up to and including version 3.0.