CVE-2013-1819

kernel: xfs: _xfs_buf_find oops on blocks beyond the filesystem end

Published Mar 6, 2013 CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Description
The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-1838 The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map.
Ubuntu USN Ubuntu USN USN-1968-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1969-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1970-1 Linux kernel (Quantal HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-1972-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1973-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1975-1 Linux kernel (OMAP4) vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 3:13 PM
Reserved
Feb 19, 2013, 12:00 AM
Status
Modified
Published
Mar 6, 2013, 10:55 PM
Modified
Jun 16, 2026, 11:52 PM
Severity
Moderate
Public date
Jan 21, 2013, 12:00 AM