Bug 141503 – Kernel: DoS when using both NFS and EXT3 (CVE-2006-3468)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Sune Kloppenborg Jeppesen (RETIRED) 2006-07-23 09:02:11 UTC]

Not sure when this is fixed. Filing this to be safe.

Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode number), which triggers an error and causes an exported directory to be remounted read-only.

[Comment 1 Tim Yamin (RETIRED) 2006-08-07 14:47:04 UTC]

Patch for ext3:

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff_plain;h=2ccb48ebb4de139eef4fcefd5f2bb823cb0d81b9;hp=f712c0c7e1796f92e45e4de144e247816d974b8f

Another useful patch for ext3:

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff_plain;h=0e31f51d8177320d61ec5786ca4aafa7b7a749b4;hp=51d8c5edd3b166fcc51aba84d78761d578400a7c

Patch for ext2, unconfirmed and may cause harm to cute innocent bunnies, wear eye protection:

http://lkml.org/lkml/2006/7/24/263

[Comment 2 Harlan Lieberman-Berg (RETIRED) 2006-09-02 19:41:07 UTC]

Maintainers, please add two ext3 patches above, or bump to 2.6.17.11.

rsbac-sources-2.6:  kang
sh-sources-2.6: sh herd
usermode-sources-2.6:  dang
xbox-sources-2.6:  chrb, gimli
xen-sources-2.6: xen herd

[Comment 3 Daniel Gryniewicz (RETIRED) 2006-09-06 16:49:12 UTC]

usermode-sources-2.6.16-r5 added.

[Comment 4 Andrew Ross (RETIRED) 2006-09-10 04:40:24 UTC]

Patches added to xen-sources-2.6.16.28

[Comment 5 Guillaume Destuynder (RETIRED) 2006-11-09 06:42:52 UTC]

rsbac-sources bumped to 2.6.18 in ~

[Comment 6 Harlan Lieberman-Berg (RETIRED) 2006-12-05 19:05:16 UTC]

Xbox-sources and sh-sources are no longer covered by Gentoo Security. Closing.