CVE-2013-2015

Kernel: ext4: hang when mounting non-journal filesystems with orphan list

Published Apr 29, 2013 CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Description
The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2668-1 linux-2.6 security update
Debian DSA Debian DSA DSA-2669-1 linux security update
EUVD EUVD EUVD-2013-2004 The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 3:20 PM
Reserved
Feb 19, 2013, 12:00 AM
Status
Modified
Published
Apr 29, 2013, 2:55 PM
Modified
Jun 16, 2026, 11:52 PM
Severity
Low
Public date
Dec 27, 2012, 12:00 AM