CVE-2009-1961: The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 befor...

Security readout for executives and security teams

CVE-2009-1961 is a local denial-of-service issue in Linux kernel OCFS2 file handling. A local user could trigger a deadlock that prevents file creation and removal. Business risk is mainly availability on systems using affected 2.6-era kernels with OCFS2 enabled. Exposure is most likely on legacy Linux systems running affected 2.6 kernels with OCFS2 in use. Systems without local untrusted users or without OCFS2 exposure have lower practical risk. Modern supported kernels are unlikely to be affected if vendor updates were applied. Treat this as a targeted legacy availability risk, not an internet-wide emergency. Prioritize if business-critical clustered storage still runs old Linux 2.6 kernels or allows local users. Otherwise, handle through legacy-system patch and retirement programs. Mitigation focus: Apply vendor kernel updates from the relevant Linux distribution advisory.; Move affected hosts to a supported kernel branch where feasible.; Check whether OCFS2 is enabled or mounted on legacy systems..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.