CVE-2012-2100

Published: 12 April 2012

The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.

From the Ubuntu security team

A flaw was found in the Linux kernel's ext4 file system when mounting a corrupt filesystem. A user-assisted remote attacker could exploit this flaw to cause a denial of service.

Status

Notes

although the description indicates only PPC is affected, my reading
of the patch commentary might well say its only PPC which is not affected

looking at this PPC is one of the few architectures where the original
patch for CVE-2009-4307 actually worked. It does not on x86 nor on the
clang compiler which optimizes away the check hence, the new CVE and patch

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2100
• http://www.openwall.com/lists/oss-security/2012/04/12/11
• https://ubuntu.com/security/notices/USN-1405-1
• https://ubuntu.com/security/notices/USN-1388-1
• https://ubuntu.com/security/notices/USN-1404-1
• https://ubuntu.com/security/notices/USN-1389-1
• https://ubuntu.com/security/notices/USN-1432-1
• https://ubuntu.com/security/notices/USN-1440-1
• https://ubuntu.com/security/notices/USN-1458-1
• https://ubuntu.com/security/notices/USN-1384-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/984757