Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kernelUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-develUpgrade python-perfUpgrade kernel-xenUpgrade perfUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-PAE-devel | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Suse | — | Upgrade kernel-ec2-base-debuginfoUpgrade kernel-xen-develUpgrade kernel-desktop-develUpgrade kernel-desktopUpgrade kernel-debug-baseUpgrade kernel-default-debuginfoUpgrade kernel-kdumpUpgrade drbd-kmp-rt_traceUpgrade kernel-rt_trace-develUpgrade kernel-vmiUpgrade kernel-source-vanillaUpgrade kernel-xen-debugsourceUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-rt-baseUpgrade kernel-debug-devel-debuginfoUpgrade kernel-iseries64Upgrade kernel-pae-debugsourceUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-ec2-baseUpgrade kernel-pae-base-debuginfoUpgrade kernel-kdumppaeUpgrade kernel-debug-develUpgrade kernel-vanilla-debugsourceUpgrade kernel-trace-baseUpgrade iscsitarget-kmp-rtUpgrade kernel-default-debugsourceUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade ofed-kmp-rtUpgrade kernel-vanilla-devel-debuginfoUpgrade cluster-network-kmp-rtUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-rt_trace-baseUpgrade kernel-trace-debuginfoUpgrade kernel-xen-debuginfoUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-debugUpgrade kernel-trace-devel-debuginfoUpgrade kernel-symsUpgrade kernel-desktop-debuginfoUpgrade drbd-kmp-rtUpgrade kernel-vanilla-baseUpgrade kernel-ppc64Upgrade kernel-ec2-debugsourceUpgrade kernel-vanillaUpgrade kernel-smpUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-paeUpgrade kernel-ec2Upgrade kernel-debug-debugsourceUpgrade kernel-rtUpgrade kernel-debug-base-debuginfoUpgrade kernel-desktop-base-debuginfoUpgrade kernel-xen-base-debuginfoUpgrade kernel-ec2-extraUpgrade kernel-vmipaeUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-desktop-devel-debuginfoUpgrade brocade-bna-kmp-rtUpgrade kernel-desktop-baseUpgrade kernel-desktop-debugsourceUpgrade kernel-default-devel-debuginfoUpgrade kernel-vanilla-debuginfoUpgrade kernel-trace-base-debuginfoUpgrade kernel-ec2-develUpgrade kernel-rt_traceUpgrade kernel-pae-devel-debuginfoUpgrade kernel-docsUpgrade cluster-network-kmp-rt_traceUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-base-debuginfoUpgrade kernel-trace-debugsourceUpgrade kernel-debug-debuginfoUpgrade kernel-trace-develUpgrade kernel-xenpaeUpgrade kernel-vanilla-develUpgrade kernel-ec2-debuginfoUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-syms-rtUpgrade kernel-pae-baseUpgrade kernel-xen-devel-debuginfoUpgrade kernel-pae-develUpgrade ocfs2-kmp-rt_traceUpgrade kernel-pae-debuginfoUpgrade kernel-bigsmp | Feb 17, 2015 | Jan 27, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-37-virtualUpgrade linux-image-3.0.0-15-powerpc-smpUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.35-31-virtualUpgrade linux-image-2.6.32-37-preemptUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.32-37-sparc64-smpUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.35-31-powerpcUpgrade linux-image-2.6.32-37-sparc64Upgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.35-31-versatileUpgrade linux-image-2.6.32-37-powerpcUpgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.32-37-genericUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.35-31-generic-paeUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.32-37-lpiaUpgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.35-31-powerpc-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-3.0.0-15-virtualUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-2.6.35-31-omapUpgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.35-31-genericUpgrade linux-image-2.6.32-37-386Upgrade linux-image-2.6.32-421-doveUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-3.0.0-15-serverUpgrade linux-image-3.0.0-15-genericUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-3.0.0-15-powerpcUpgrade linux-image-2.6.32-37-serverUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.31-612-imx51Upgrade linux-image-2.6.32-37-versatileUpgrade linux-image-2.6.32-37-ia64Upgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.35-31-serverUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.32-37-powerpc-smpUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-3.0.0-15-omapUpgrade linux-image-2.6.35-31-powerpc64-smpUpgrade linux-image-2.6.32-37-generic-paeUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.32-341-ec2Upgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.32-37-powerpc64-smp | Nov 8, 2024 | Jan 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub