Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-firmwareUpgrade kernel-docUpgrade kernel-PAE-develUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-PAE | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Suse | — | Upgrade kernel-vanilla-devel-debuginfoUpgrade kernel-ppc64Upgrade drbd-kmp-rtUpgrade kernel-rt_trace-baseUpgrade kernel-kdumppaeUpgrade kernel-ec2-baseUpgrade cluster-network-kmp-rtUpgrade kernel-trace-devel-debuginfoUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-develUpgrade kernel-kdumpUpgrade kernel-pae-base-debuginfoUpgrade drbd-kmp-rt_traceUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-xen-develUpgrade kernel-desktopUpgrade kernel-desktop-debuginfoUpgrade ofed-kmp-rtUpgrade kernel-debug-devel-debuginfoUpgrade kernel-vanilla-debugsourceUpgrade kernel-debug-baseUpgrade kernel-debug-develUpgrade kernel-trace-baseUpgrade kernel-rt-develUpgrade kernel-default-debuginfoUpgrade kernel-default-baseUpgrade kernel-traceUpgrade kernel-iseries64Upgrade kernel-pae-debugsourceUpgrade kernel-rt_trace-develUpgrade kernel-ec2-debugsourceUpgrade kernel-xen-debuginfoUpgrade kernel-default-debugsourceUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-trace-debuginfoUpgrade kernel-debugUpgrade kernel-vanillaUpgrade kernel-sourceUpgrade kernel-vanilla-baseUpgrade kernel-rt-baseUpgrade kernel-vmiUpgrade kernel-xen-debugsourceUpgrade kernel-xen-baseUpgrade kernel-desktop-develUpgrade kernel-docsUpgrade kernel-rt_traceUpgrade kernel-pae-devel-debuginfoUpgrade kernel-smpUpgrade kernel-trace-develUpgrade kernel-default-base-debuginfoUpgrade kernel-desktop-base-debuginfoUpgrade iscsitarget-kmp-rtUpgrade kernel-debug-debuginfoUpgrade kernel-desktop-baseUpgrade kernel-desktop-debugsourceUpgrade kernel-debug-debugsourceUpgrade kernel-default-develUpgrade kernel-vanilla-debuginfoUpgrade kernel-vanilla-develUpgrade kernel-xenUpgrade kernel-default-devel-debuginfoUpgrade kernel-ec2Upgrade kernel-trace-debugsourceUpgrade kernel-ec2-base-debuginfoUpgrade kernel-trace-base-debuginfoUpgrade kernel-xen-devel-debuginfoUpgrade kernel-debug-base-debuginfoUpgrade ocfs2-kmp-rt_traceUpgrade kernel-pae-debuginfoUpgrade kernel-pae-develUpgrade kernel-bigsmpUpgrade kernel-xen-base-debuginfoUpgrade kernel-rtUpgrade brocade-bna-kmp-rtUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-rtUpgrade kernel-xenpaeUpgrade kernel-paeUpgrade kernel-syms-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-source-rtUpgrade kernel-vmipaeUpgrade kernel-ec2-debuginfoUpgrade kernel-pae-baseUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade SUSE-Linux-Enterprise-RT-release | Feb 17, 2015 | Jan 27, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-31-omapUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.24-30-386Upgrade linux-image-3.0.0-15-powerpc-smpUpgrade linux-image-2.6.35-31-powerpcUpgrade linux-image-2.6.32-37-virtualUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.35-31-versatileUpgrade linux-image-2.6.32-37-lpiaUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.32-37-sparc64Upgrade linux-image-2.6.35-31-powerpc-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-37-sparc64-smpUpgrade linux-image-2.6.35-31-virtualUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-3.0.0-15-virtualUpgrade linux-image-2.6.32-37-preemptUpgrade linux-image-2.6.35-31-genericUpgrade linux-image-2.6.32-37-genericUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.32-37-powerpcUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.35-31-generic-paeUpgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.32-341-ec2Upgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-2.6.32-37-generic-paeUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.31-612-imx51Upgrade linux-image-2.6.32-37-powerpc64-smpUpgrade linux-image-2.6.32-37-386Upgrade linux-image-2.6.35-31-serverUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.32-37-versatileUpgrade linux-image-2.6.32-37-powerpc-smpUpgrade linux-image-3.0.0-15-serverUpgrade linux-image-3.0.0-15-omapUpgrade linux-image-2.6.35-31-powerpc64-smpUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-3.0.0-15-genericUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.32-37-serverUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.32-421-doveUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-3.0.0-15-powerpcUpgrade linux-image-2.6.32-37-ia64Upgrade linux-image-2.6.24-30-server | Nov 8, 2024 | Jan 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub