CVE-2011-2695

CVE-2011-2695 describes multiple off-by-one errors in the ext4 filesystem of the Linux kernel prior to version 3.0-rc5. This vulnerability allows a local attacker to trigger a denial of service (system crash) by performing a write operation on a sparse file in extent format, specifically targeting a block number corresponding to the largest 32-bit unsigned integer. The severity is rated as medium (CVSS 4.9), indicating a local attack vector with low complexity, leading to a complete system availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.