The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel before 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-trace-baseUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-pae-develUpgrade kernel-trace-develUpgrade kernel-vanilla-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-ppc64Upgrade kernel-zfcpdumpUpgrade kernel-ppc64-baseUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-ppc64-develUpgrade kernel-default-develUpgrade kernel-pae-baseUpgrade kernel-symsUpgrade kernel-paeUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade kernel-macrosUpgrade kernel-default-extra | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.31-16-server | Nov 8, 2024 | Dec 13, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub