The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel before 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-xen-develUpgrade kernel-default-manUpgrade kernel-traceUpgrade kernel-default-extraUpgrade kernel-xenUpgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade kernel-ppc64-develUpgrade kernel-macrosUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade kernel-paeUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-pae-develUpgrade kernel-trace-develUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-vanilla-baseUpgrade kernel-default | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.31-16-powerpc | Nov 8, 2024 | Dec 13, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub