CVE-2009-4131

kernel: ext4: Fix insufficient checks in EXT4_IOC_MOVE_EXT

Published Dec 13, 2009 CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Description
The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel before 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2009-4101 The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel before 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions.
Ubuntu USN Ubuntu USN USN-869-1 Linux kernel vulnerabilities
Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 6:54 AM
Reserved
Dec 1, 2009, 12:00 AM
Status
Modified
Published
Dec 13, 2009, 1:30 AM
Modified
Jun 16, 2026, 11:13 PM
Severity
Important
Public date
Dec 9, 2009, 12:00 AM