CVE-2008-3534

Name	CVE-2008-3534
Description	The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause a denial of service (system crash) via a certain sequence of file create, remove, and overwrite operations, as demonstrated by the insserv program, related to allocation of "useless pages" and improper maintenance of the i_blocks count.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-1636-1

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
linux-2.6	source	etch	(not affected)
linux-2.6	source	(unstable)	2.6.26-2
linux-2.6.24	source	etch	2.6.24-6~etchnhalf.5	DSA-1636-1
linux-2.6.24	source	(unstable)	2.6.24-6~etchnhalf.5

Notes

[etch] - linux-2.6 <not-affected> (Vulnerable code not present)
14fcc23fdc78e9d32372553ccf21758a9bd56fa1
Fixed in 2.6.25.14 and 2.6.26.1