Every CVESearch/Get API key

CVE-2011-2689

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure...

4.9 Medium

CVE-2011-2689 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published July 28, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.

What does this mean?
Severity
4.9 MediumCVSS 2.0, NVD
Exploit chance
0.41%EPSS, 35th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.

Exploit likelihood

0.41%Down 0.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-PAE
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debug
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
Show 42 moreShow less
Affected packages
PackageAffectedFixed
kernel-doc
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-headers
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-xen
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-PAE
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debug
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-doc
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-headers
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-kdump
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-kdump-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-kdump-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-xen
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
before 0:2.6.18-274.el5
0:2.6.18-274.el5
kernel
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-bootwrapper
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debug
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-doc
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-firmware
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-headers
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-kdump
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-kdump-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-kdump-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
perf
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
perf-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6

What each source reports

NVD Score used4.9

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.

Record
CVE-2011-2689
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-400
Updated
2026-11-02
CVE ListNo score

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.

Record
CVE-2011-2689
Updated
2026-11-02
EUVDEUVD-2011-2670No score

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.

Record
EUVD-2011-2670
Updated
2026-11-03
GitHub AdvisoriesGHSA-gfx4-r3v9-vph4No score

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure...

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.

Record
GHSA-gfx4-r3v9-vph4
Weakness
CWE-400
Updated
2026-11-02
OSVUBUNTU-CVE-2011-2689No score

The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.

Record
UBUNTU-CVE-2011-2689
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 33 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open