CVE-2011-3638: Medium severity linux kernel vulnerability
A flaw was found in the way splitting two extents in ext4extconverttoinitialized() worked. Althrough ex has been updated in memory, it is not dirtied both in ext4extconverttoinitialized() and ext4extinsertextent(). The disk layout is corrupted. Then it will meet with a BUGON() when writting at the start of that extent again.
Introduced in: 56055d3ae4cc7fa6d2b10885f20269de8a989ed7
Upstream fix: 667eff35a1f56fa74ce98a0c7c29a40adc1ba4e3
Other sources
fs/ext4/extents.c in the Linux kernel before 3.0 does not mark a modif ...
— Debian
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3638?
CVE-2011-3638 is classified as a high severity vulnerability due to the potential for disk layout corruption leading to system crashes.
How do I fix CVE-2011-3638?
To fix CVE-2011-3638, you should upgrade your Linux kernel to a version above 3.0 where the vulnerability has been patched.
What software is affected by CVE-2011-3638?
CVE-2011-3638 affects the Linux kernel version 2.6 and earlier versions up to 3.0.
What type of vulnerability is CVE-2011-3638?
CVE-2011-3638 is a flaw in the ext4 filesystem's handling of extent management, specifically related to memory and disk synchronization.
Can CVE-2011-3638 lead to data loss?
Yes, CVE-2011-3638 can lead to data loss or corruption due to the improper handling of disk layouts.