CVE-2009-0746: The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 bef...

Security readout for executives and security teams

This is an older Linux kernel availability issue in ext4 filesystem handling. A local user who can get a crafted ext4 filesystem mounted could trigger a kernel OOPS, causing denial of service. The cited record does not show active exploitation or a CVSS score. Exposure is most plausible on legacy systems running the specified 2.6.27 or 2.6.28 kernels, especially where local users or workflows can mount untrusted ext4 filesystems. Modern, supported kernels are unlikely to be affected, but legacy appliances and virtualized infrastructure should be checked. Treat this as a legacy availability risk. It is not presented as remote code execution or active exploitation, but affected systems could be crashed by a local actor with mount capability. Prioritize legacy Linux and appliance inventories. Mitigation focus: Upgrade Linux kernel 2.6.27 to 2.6.27.19 or later vendor-fixed builds.; Upgrade Linux kernel 2.6.28 to 2.6.28.7 or later vendor-fixed builds.; Review Red Hat, Debian, Ubuntu, and VMware advisories where those platforms are in scope..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.