CVE-2009-1961
Fixed in a distro release EPSS <1%
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.
Products: linux_kernel, debian_linux, canonical ubuntu_linux, opensuse, suse linux_enterprise, suse linux_enterprise_desktop, suse linux_enterprise_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | linux-2.6.24 | 2.6.24-6~etchnhalf.8etch2 |
| Red Hat enterprise mrg 1 | kernel-rt | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debug | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debug-debuginfo | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debug-devel | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debuginfo | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debuginfo-common | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-devel | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-doc | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-trace | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-trace-debuginfo | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-trace-devel | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-vanilla | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-vanilla-debuginfo | 0:2.6.24.7-126.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-vanilla-devel | 0:2.6.24.7-126.el5rt |