CVE-2009-4021

Publication date 25 November 2009

Last updated 24 July 2024

Ubuntu priority

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
linux	9.10 karmic	Not affected
	9.04 jaunty	Fixed 2.6.28-18.59
	8.10 intrepid	Fixed 2.6.27-17.45
	8.04 LTS hardy	Fixed 2.6.24-27.65
	6.06 LTS dapper	Not in release
linux-source-2.6.15	9.10 karmic	Not in release
	9.04 jaunty	Not in release
	8.10 intrepid	Not in release
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Fixed 2.6.15-55.82

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
linux	Upstream: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f60311d5f7670d9539b424e4ed8b5c0872fc9e83

CVE-2009-4021

Status

Patch details

References

Related Ubuntu Security Notices (USN)

Other references