Candidate: CVE-2008-4934 PublicDate: 2008-11-05 15:00:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4934 https://ubuntu.com/security/notices/USN-679-1 Description: The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows attackers to cause a denial of service (system crash) via a crafted hfsplus filesystem image. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_linux-source-2.6.15: upstream_linux-source-2.6.15: released (2.6.28~rc1) dapper_linux-source-2.6.15: released (2.6.15-53.74) gutsy_linux-source-2.6.15: DNE hardy_linux-source-2.6.15: DNE intrepid_linux-source-2.6.15: DNE devel_linux-source-2.6.15: DNE Patches_linux-source-2.6.22: upstream_linux-source-2.6.22: released (2.6.28~rc1) dapper_linux-source-2.6.22: DNE gutsy_linux-source-2.6.22: released (2.6.22-16.60) hardy_linux-source-2.6.22: DNE intrepid_linux-source-2.6.22: DNE devel_linux-source-2.6.22: DNE Patches_linux: upstream: 649f1ee6c705aab644035a7998d7b574193a598a upstream_linux: released (2.6.28~rc1) dapper_linux: DNE gutsy_linux: DNE hardy_linux: released (2.6.24-22.45) intrepid_linux: released (2.6.27-9.19) devel_linux: not-affected