CVE-2012-2100
The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86...
7.1 HighFix available
CVE-2012-2100 is a high vulnerability (CVSS 7.1) in Linux Kernel, published April 12, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.67%, the 85th percentile. Fixed in kernel 0:2.6.18-308.20.1.el5.
- Severity
- 7.1 HighCVSS 2.0, NVD
- Exploit chance
- 2.67%EPSS, 85th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:2.6.18-308.20.1.el5kernel +97 more
Description
The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.
Exploit likelihood
2.67%Up 1.3 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-develRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
Show 88 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-docRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-headersRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernelRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-docRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-headersRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-308.20.1.el5 | 0:2.6.18-308.20.1.el5 |
kernelRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-develRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-docRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perfRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perfRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernelRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perfRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perfRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perfRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernelRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perfRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
python-perfRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs | before 0:2.6.32-279.19.1.el6 | 0:2.6.32-279.19.1.el6 |
What each source reports
NVD Score used
The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.
- Record
CVE-2012-2100- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE ListNo score
The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.
- Record
CVE-2012-2100- Updated
- 2026-11-02
EUVDEUVD-2012-2104No score
The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.
- Record
EUVD-2012-2104- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cx5x-f2xm-m2crNo score
The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86...
The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.
- Record
GHSA-cx5x-f2xm-m2cr- Updated
- 2026-11-02
OSVBELL-CVE-2012-2100
CVE-2012-2100 does not affect BellSoft software
- Record
BELL-CVE-2012-2100- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2100No score
The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.
- Record
UBUNTU-CVE-2012-2100- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
rhn.redhat.com/errata/RHSA-2012-1580.html
bugzilla.redhat.com/show_bug.cgi?id=809687
securityfocus.com/bid/53414
openwall.com/lists/oss-security/2012/04/12/11
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d50f2ab6f050311dbf7b8f5501b25f0bf64a439b
Show 44 moreShow less
github.com/torvalds/linux/commit/d50f2ab6f050311dbf7b8f5501b25f0bf64a439b
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2
nvd.nist.gov/vuln/detail/CVE-2012-2100
docs.bell-sw.com/security/cves/CVE-2012-2100
access.redhat.com/errata/RHSA-2012:1445
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1445.json
cve.org/CVERecord?id=CVE-2012-2100
ubuntu.com/security/CVE-2012-2100