The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-symsUpgrade kernel-bigsmpUpgrade kernel-vmipaeUpgrade kernel-iseries64Upgrade kernel-xenUpgrade kernel-smpUpgrade kernel-rt_trace-develUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade ocfs2-kmp-rt_traceUpgrade cluster-network-kmp-rt_traceUpgrade kernel-kdumppaeUpgrade ocfs2-kmp-rtUpgrade brocade-bna-kmp-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-rt_trace-baseUpgrade kernel-rt-baseUpgrade kernel-vmiUpgrade kernel-debugUpgrade kernel-kdumpUpgrade cluster-network-kmp-rtUpgrade kernel-defaultUpgrade kernel-ppc64Upgrade kernel-xenpaeUpgrade iscsitarget-kmp-rtUpgrade ofed-kmp-rtUpgrade kernel-rt_traceUpgrade drbd-kmp-rtUpgrade drbd-kmp-rt_trace | Feb 17, 2015 | Aug 29, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-419-doveUpgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.32-35-serverUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-35-virtualUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-219-doveUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.38-12-powerpc64-smpUpgrade linux-image-2.6.38-12-omapUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-35-preemptUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-12-powerpcUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-35-386Upgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-35-ia64Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-12-powerpc-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.38-12-versatileUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-35-sparc64Upgrade linux-image-2.6.32-319-ec2Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-35-genericUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-35-powerpc-smp | Nov 8, 2024 | Aug 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub