Linux kernel ext[234] directory corruption denial of service

🗓️ 19 Nov 2008 13:43:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 5 Views

Linux ext2/3/4 dir.c error reporting enables DoS via unlimited printk messages on corrupted directory size and blocks.

Reporter	Title	Published	Views	Family All 235
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	6 Jul 201600:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	4	ia64	kernel	0:2.6.9-78.0.8.EL	kernel-0:2.6.9-78.0.8.EL.ia64.rpm
Red Hat Enterprise Linux	4	ppc64	kernel	0:2.6.9-78.0.8.EL	kernel-0:2.6.9-78.0.8.EL.ppc64.rpm
Red Hat Enterprise Linux	4	s390	kernel	0:2.6.9-78.0.8.EL	kernel-0:2.6.9-78.0.8.EL.s390.rpm
Red Hat Enterprise Linux	4	s390x	kernel	0:2.6.9-78.0.8.EL	kernel-0:2.6.9-78.0.8.EL.s390x.rpm
Red Hat Enterprise Linux	4	x86_64	kernel	0:2.6.9-78.0.8.EL	kernel-0:2.6.9-78.0.8.EL.x86_64.rpm
Red Hat Enterprise Linux	4	any	kernel	0:2.6.9-78.0.8.EL.i686	kernel-0:2.6.9-78.0.8.EL.i686.noarch.rpm
Red Hat Enterprise Linux	4	any	kernel	0:2.6.9-78.0.8.EL.ppc64iseries	kernel-0:2.6.9-78.0.8.EL.ppc64iseries.noarch.rpm
Red Hat Enterprise Linux	4	ia64	kernel-debuginfo	0:2.6.9-78.0.8.EL	kernel-debuginfo-0:2.6.9-78.0.8.EL.ia64.rpm
Red Hat Enterprise Linux	4	ppc64	kernel-debuginfo	0:2.6.9-78.0.8.EL	kernel-debuginfo-0:2.6.9-78.0.8.EL.ppc64.rpm
Red Hat Enterprise Linux	4	s390	kernel-debuginfo	0:2.6.9-78.0.8.EL	kernel-debuginfo-0:2.6.9-78.0.8.EL.s390.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2008-3528
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2008-3528
cve	www.cve.org/CVERecord

25 Jun 2026 10:35Current

6.1Medium risk

Vulners AI Score6.1

CVSS 22.1

EPSS0.00525

linux kernel extended filesystem two extended filesystem three extended filesystem four directory corruption printk flood denial of service