CVE-2010-0727: Debian Linux

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

The gfs2_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs_lock function in the Linux kernel on Red Hat Enterprise Linux (RHEL) 5 and 6, does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a denial of service (BUG and system crash) by locking a file on a (1) GFS or (2) GFS2 filesystem, and then changing this file's permissions.

Affected products

• Debian Debian Linux: version 5.0 only
• Linux Linux Kernel: up to and including 2.6.33.1
• Red Hat Enterprise Linux: version 5.0 only; version 6.0 only

Published 2010-03-16. Last modified 2026-06-16.