The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this file as a donor.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade kernel-xenUpgrade preload-kmp-desktopUpgrade kernel-develUpgrade kernel-vanilla-baseUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-sourceUpgrade preload-kmp-defaultUpgrade kernel-desktop-develUpgrade kernel-source-vanillaUpgrade kernel-trace-baseUpgrade kernel-vanilla-develUpgrade kernel-paeUpgrade kernel-xen-develUpgrade kernel-pae-baseUpgrade kernel-desktop-baseUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-vmi-develUpgrade kernel-vanillaUpgrade kernel-desktopUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-ec2-develUpgrade kernel-traceUpgrade kernel-trace-develUpgrade kernel-debug-baseUpgrade kernel-pae-devel | Feb 17, 2015 | Sep 30, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.35-24-powerpc | Nov 8, 2024 | Sep 30, 2010 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub