The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenU-develUpgrade kernel-debugUpgrade kernel-smpUpgrade kernel-develUpgrade kernel-xenUUpgrade kernel-smp-develUpgrade kernel-hugemem-develUpgrade kernel-hugememUpgrade kernel-PAE-develUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-xen | Dec 1, 2016 | Aug 12, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 12, 2008 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-pmac64Upgrade kernel-umUpgrade kernel-sn2Upgrade kernel-docsUpgrade kernel-debugUpgrade kernel-s390-debugUpgrade kernel-vanillaUpgrade kernel-s390Upgrade um-host-kernelUpgrade kernel-iseries64Upgrade kernel-ppc64Upgrade um-host-install-initrdUpgrade kernel-xenUpgrade kernel-bigsmpUpgrade kernel-pseries64Upgrade kernel-rtUpgrade kernel-rt_timingUpgrade kernel-s390xUpgrade xen-kmpUpgrade kernel-xenpaeUpgrade kernel-kdumpUpgrade kernel-rt_debugUpgrade kernel-s390x-debugUpgrade slert-releaseUpgrade kernel-rt_bigsmpUpgrade kernel-smpUpgrade kernel-paeUpgrade kernel-64k-pagesizeUpgrade kernel-default | Feb 17, 2015 | Aug 12, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-19-itaniumUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.24-19-rt | Nov 8, 2024 | Aug 12, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | Aug 12, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | Aug 12, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub