Every CVE Search/ Get API key

CVE-2011-2689

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure...

4.9 MediumFix available

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.

Exploit likelihood

0.41%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.9

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.

Record
CVE-2011-2689
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-400
Updated
2026-11-02
CVE List No score

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.

Record
CVE-2011-2689
Updated
2026-11-02
EUVDEUVD-2011-2670 No score

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.

Record
EUVD-2011-2670
Updated
2026-11-03
GitHub AdvisoriesGHSA-gfx4-r3v9-vph4 No score

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure...

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.

Record
GHSA-gfx4-r3v9-vph4
Weakness
CWE-400
Updated
2026-11-02
OSVUBUNTU-CVE-2011-2689 No score

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.

Record
UBUNTU-CVE-2011-2689
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-PAE
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debug
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-devel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
Show 42 moreShow less
Affected packages
PackageAffectedFixed
kernel-doc
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-headers
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-xen
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-PAE
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debug
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-doc
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-headers
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-kdump
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-kdump-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-kdump-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-xen
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-bootwrapper
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debug
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-devel
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-doc
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-firmware
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-headers
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-kdump
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-kdump-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-kdump-devel
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
perf
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
perf-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2689 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published July 28, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 34th percentile. Fixed in kernel 0:2.6.18-274.el5.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 33 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open