CVE-2008-1594

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-03-31 · updated 2026-06-16

Description

The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which allows local users of one node to cause a denial of service (remote node crash) by using chfs or lreducelv to reduce a filesystem's size.

Affected products

IBM AIX: 5.2, 5.3, 6.1

References

http://securitytracker.com/id?1019606
http://www.ibm.com/support/docview.wss?uid=isg1IZ04946
http://www.ibm.com/support/docview.wss?uid=isg1IZ04953
http://www.ibm.com/support/docview.wss?uid=isg1IZ05246
http://www.securityfocus.com/bid/28467
http://www.vupen.com/english/advisories/2008/0865
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5434
http://securitytracker.com/id?1019606
http://www.ibm.com/support/docview.wss?uid=isg1IZ04946

Get alerted when CVE-2008-1594 or the next vulnerability affects your stack