The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this file as a donor.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-vanilla-develUpgrade preload-kmp-desktopUpgrade kernel-trace-baseUpgrade preload-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-default-baseUpgrade kernel-sourceUpgrade kernel-desktop-develUpgrade kernel-source-vanillaUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-debug-develUpgrade kernel-debug-baseUpgrade kernel-debugUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade kernel-ec2-develUpgrade kernel-traceUpgrade kernel-pae-develUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-desktopUpgrade kernel-symsUpgrade kernel-vmi-develUpgrade kernel-vanillaUpgrade kernel-desktop-base | Feb 17, 2015 | Sep 30, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.35-25-generic-pae | Nov 8, 2024 | Sep 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub