#VU92675 Resource management errors in Linux kernel - CVE-2009-0747

Vulnerability identifier: #VU92675

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2009-0747

CWE-ID: CWE-399

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management errors error within the ext4_block_to_path() function in fs/ext4/inode.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's repository.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://bugzilla.kernel.org/show_bug.cgi?id=12375
https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=06a279d636734da32bb62dd2f7b0ade666f65d7c
https://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19
https://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7
https://rhn.redhat.com/errata/RHSA-2009-1243.html
https://secunia.com/advisories/34394
https://secunia.com/advisories/36562
https://secunia.com/advisories/37471
https://www.debian.org/security/2009/dsa-1749
https://www.securityfocus.com/archive/1/507985/100/0/threaded
https://www.ubuntu.com/usn/usn-751-1
https://www.vmware.com/security/advisories/VMSA-2009-0016.html
https://www.vupen.com/english/advisories/2009/0509
https://www.vupen.com/english/advisories/2009/3316
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8585
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9200

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.