[CVE-2011-2689] GFS2: make sure fallocate bytes is a multiple of blksize

Andy Whitcroft apw at canonical.com
Tue Aug 2 09:31:58 UTC 2011


CVE-2011-2689
	The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel
	before 3.0-rc1 does not ensure that the size of a chunk allocation
	is a multiple of the block size, which allows local users to
	cause a denial of service (BUG and system crash) by arranging
	for all resource groups to have too little free space.

This bug was introduced in v2.6.37-rc1 and therefore maverick and
earlier are unaffected.  Following this email is a patch for natty and
natty/ti-omap4.  This patch is a clean charry-pick of the upstream fix.

Proposing for natty and natty/ti-omap4.

-apw




More information about the kernel-team mailing list