CVE-2013-1819

kernel: xfs: _xfs_buf_find oops on blocks beyond the filesystem end

Published Mar 6, 2013 CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Description
The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-1838 The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map.
Ubuntu USN Ubuntu USN USN-1968-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1969-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1970-1 Linux kernel (Quantal HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-1972-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1973-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1975-1 Linux kernel (OMAP4) vulnerabilities
History

No history.

Weaknesses
  • CWE-20

    Improper Input Validation

  • CWE-476

    NULL Pointer Dereference

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 3:13 PM
Reserved
Feb 19, 2013, 12:00 AM
Status
Modified
Published
Mar 6, 2013, 10:55 PM
Modified
Jun 16, 2026, 11:52 PM
Severity
Moderate
Public date
Jan 21, 2013, 12:00 AM