CVE-2009-0746
Status: ModifiedMedium (4.9)—Exploit
Severity4.9Medium · CVSS 2.0
Exploitation probability0.75 %higher than 54% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB
The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem.
CVSS
- Base score
- 4.9
- Version
- 2.0
- Vector
- AV:L/AC:L/Au:N/C:N/I:N/A:C
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 0.75 %
- Percentile among all scored CVEs
- 54
- Score date
- 10/21/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Public exploits
Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.
- Published on Exploit-DB · Linux Kernel 2.6.x - 'make_indexed_dir()' Local Denial of Service (2/16/2009)
Affected technologies (1)
CWEs
- CWE-20
References
Show 36 references
- http://bugzilla.kernel.org/show_bug.cgi?id=12430
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7
- http://osvdb.org/52202
- http://rhn.redhat.com/errata/RHSA-2009-1243.html
- http://secunia.com/advisories/34394
- http://secunia.com/advisories/36562
- http://secunia.com/advisories/37471
- http://www.debian.org/security/2009/dsa-1749
- http://www.securityfocus.com/archive/1/507985/100/0/threaded
- http://www.ubuntu.com/usn/usn-751-1
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- http://www.vupen.com/english/advisories/2009/0509
- http://www.vupen.com/english/advisories/2009/3316
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48872
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039
- http://bugzilla.kernel.org/show_bug.cgi?id=12430
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7
- http://osvdb.org/52202
- http://rhn.redhat.com/errata/RHSA-2009-1243.html
- http://secunia.com/advisories/34394
- http://secunia.com/advisories/36562
- http://secunia.com/advisories/37471
- http://www.debian.org/security/2009/dsa-1749
- http://www.securityfocus.com/archive/1/507985/100/0/threaded
- http://www.ubuntu.com/usn/usn-751-1
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- http://www.vupen.com/english/advisories/2009/0509
- http://www.vupen.com/english/advisories/2009/3316
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48872
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039
Raw JSON (NVD)
Show
{
"id": "CVE-2009-0746",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.9,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-02-27T17:30:09.937",
"references": [
{
"url": "http://bugzilla.kernel.org/show_bug.cgi?id=12430",
"source": "cve@mitre.org"
},
{
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f",
"source": "cve@mitre.org"
},
{
"url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19",
"source": "cve@mitre.org"
},
{
"url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/52202",
"source": "cve@mitre.org"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/34394",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/36562",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/37471",
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2009/dsa-1749",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.ubuntu.com/usn/usn-751-1",
"source": "cve@mitre.org"
},
{
"url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2009/0509",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2009/3316",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48872",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039",
"source": "cve@mitre.org"
},
{
"url": "http://bugzilla.kernel.org/show_bug.cgi?id=12430",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/52202",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/34394",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/36562",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/37471",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2009/dsa-1749",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ubuntu.com/usn/usn-751-1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2009/0509",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2009/3316",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48872",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem."
},
{
"lang": "es",
"value": "La función make_indexed_dir en fs/ext4/namei.c en el kernel de Linux v2.6.27 anteriores a v2.6.27.19 y v2.6.28 anteriores a v2.6.28.7 no valida el campo rec_len, lo que permite a usuarios locales provocar una denegación de servicio (OOPS ) por tratar de montar un sistema de archivos ext4 manipulado."
}
],
"lastModified": "2026-06-16T23:05:43.033",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "856FE78A-29B5-4411-98A0-4B0281C17EB9"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11795F8E-7ACD-4597-9194-FC7241DCE057"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7954A701-1671-4080-B1E6-47E0208FD28C"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63D06512-EAF0-48C6-98F0-066E63FF07EC"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D75B48F1-623A-4B96-9E08-4AA2DE748490"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26BD805F-08EB-42EC-BC54-26A7278E5089"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "217715A5-E69D-45C0-B8E4-5681528C651B"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A87AD66C-4321-4459-8556-3B0BA38C493A"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87A347E0-9C0B-4674-9363-3C36DA27AC45"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
}
],
"operator": "OR"
}
]
}
],
"vendorComments": [
{
"comment": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG. \n\nThis issue was addressed in Red Hat Enterprise Linux 5 by\nhttps://rhn.redhat.com/errata/RHSA-2009-1243.html",
"lastModified": "2009-09-02T00:00:00",
"organization": "Red Hat"
}
],
"sourceIdentifier": "cve@mitre.org"
}