The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a…

published 2012-01-27 14 y ago modified 2026-06-16 4 mo ago also EUVD-2011-4080

cvss: 2.1; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.5%; EPSS 0.5% chance of exploitation in 30 days, percentile 40%
public exploits: 0; none known

The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and kernel oops) via an ext3 or ext4 image with an "invalid log first block value."

Patch / fix

distros 1

kernel RHEL 6 2.6.32-220.7.1.el6
perf RHEL 6 2.6.32-220.7.1.el6
python-perf RHEL 6 2.6.32-220.7.1.el6
kernel-kdump RHEL 6 2.6.32-220.7.1.el6
kernel-firmware RHEL 6 2.6.32-220.7.1.el6
kernel-bootwrapper RHEL 6 2.6.32-220.7.1.el6
kernel-debuginfo-common-i686 RHEL 6 2.6.32-220.7.1.el6
kernel-debuginfo-common-ppc64 RHEL 6 2.6.32-220.7.1.el6

red hat advisories RHSA-2012:0350 RHSA-2012:0007 RHSA-2012:0333 RHSA-2012:0010

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2011-4132 updated 2026-11-05 cvss 4.7

kernel: jbd/jbd2: invalid value of first log block leads to oops

Red Hat Enterprise Linux 4 kernel
affected: no fix available
Red Hat Enterprise Linux (v. 5 server) kernel 2.6.18-274.17.1.el5, kernel-PAE 2.6.18-274.17.1.el5, kernel-xen 2.6.18-274.17.1.el5, kernel-kdump 2.6.18-274.17.1.el5, kernel-debuginfo-common 2.6.18-274.17.1.el5 Red Hat Enterprise Linux Desktop (v. 5 client) kernel 2.6.18-274.17.1.el5, kernel-PAE 2.6.18-274.17.1.el5, kernel-xen 2.6.18-274.17.1.el5, kernel-debuginfo-common 2.6.18-274.17.1.el5
fixed: vendor fix RHSA-2012:0007
Red Hat Enterprise Linux Desktop (v. 6) perf 2.6.32-220.7.1.el6, kernel 2.6.32-220.7.1.el6, kernel-firmware 2.6.32-220.7.1.el6, kernel-debuginfo-common-i686 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6 Red Hat Enterprise Linux Desktop Optional (v. 6) kernel 2.6.32-220.7.1.el6, python-perf 2.6.32-220.7.1.el6, kernel-debuginfo-common-i686 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6 Red Hat Enterprise Linux HPC Node (v. 6) perf 2.6.32-220.7.1.el6, kernel 2.6.32-220.7.1.el6, kernel-firmware 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6 Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel 2.6.32-220.7.1.el6, python-perf 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6 Red Hat Enterprise Linux Server (v. 6) perf 2.6.32-220.7.1.el6, kernel 2.6.32-220.7.1.el6, kernel-kdump 2.6.32-220.7.1.el6, kernel-firmware 2.6.32-220.7.1.el6, kernel-bootwrapper 2.6.32-220.7.1.el6, kernel-debuginfo-common-i686 2.6.32-220.7.1.el6, +3 more Red Hat Enterprise Linux Server Optional (v. 6) kernel 2.6.32-220.7.1.el6, python-perf 2.6.32-220.7.1.el6, kernel-debuginfo-common-i686 2.6.32-220.7.1.el6, kernel-debuginfo-common-ppc64 2.6.32-220.7.1.el6, kernel-debuginfo-common-s390x 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6

+2 more productsfewer

Red Hat Enterprise Linux Workstation (v. 6) perf 2.6.32-220.7.1.el6, kernel 2.6.32-220.7.1.el6, kernel-firmware 2.6.32-220.7.1.el6, kernel-debuginfo-common-i686 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6 Red Hat Enterprise Linux Workstation Optional (v. 6) kernel 2.6.32-220.7.1.el6, python-perf 2.6.32-220.7.1.el6, kernel-debuginfo-common-i686 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6

fixed: vendor fix RHSA-2012:0350
Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt 3.0.18-rt34.53.el6rt, kernel-rt 2.6.33.9-rt31.79.el6rt, kernel-rt-trace 3.0.18-rt34.53.el6rt, kernel-rt-trace 2.6.33.9-rt31.79.el6rt, kernel-rt-vanilla 3.0.18-rt34.53.el6rt, kernel-rt-firmware 3.0.18-rt34.53.el6rt, +4 more
fixed: vendor fix RHSA-2012:0010

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.47% chance of exploitation in the next 30 days, higher than 40% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

xorl.wordpress.com http://xorl.wordpress.com/2011/12/08/cve-2011-4132-linux-kernel-jbdjbd2-local-dos/ referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	2.1	AV:L/AC:L/Au:N/C:N/I:N/A:P

Classification

Weakness

CWE-20 Improper Input Validation

Technology feeds

Linux kernel rss critical rss

References

xorl.wordpress.com /2011/12/08/cve-2011-4132-linux-kernel-jbdjbd2-local-dos/
exploit
lists.opensuse.org /opensuse-security-announce/2012-04/msg00021.html
vendor-advisory
lists.opensuse.org /opensuse-security-announce/2015-04/msg00020.html
vendor-advisory
git.kernel.org /?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=8762202dd0d6e46854f786bdb6fb3780a1625efe
secunia.com /advisories/48898
third-party-advisory
securitytracker.com /id?1026325
vdb-entry
securityfocus.com /bid/50663
vdb-entry
openwall.com /lists/oss-security/2011/11/11/6
mailing-list
bugzilla.redhat.com /show_bug.cgi?id=753341
openwall.com /lists/oss-security/2011/11/13/4
mailing-list

Sources

CVE List CVE-2011-4132
NVD CVE-2011-4132

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary