Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade python-perfUpgrade kernel-docUpgrade kernel-develUpgrade perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-firmwareUpgrade kernelUpgrade kernel-debugUpgrade kernel-xen-devel | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jan 27, 2012 |
| Suse | — | Upgrade kernel-ec2-base-debuginfoUpgrade kernel-xen-develUpgrade kernel-default-debugsourceUpgrade cluster-network-kmp-rtUpgrade kernel-kdumppaeUpgrade kernel-develUpgrade kernel-debug-baseUpgrade iscsitarget-kmp-rtUpgrade kernel-traceUpgrade drbd-kmp-rt_traceUpgrade kernel-debugUpgrade kernel-vanilla-baseUpgrade kernel-vanilla-debugsourceUpgrade kernel-rt-develUpgrade kernel-vanillaUpgrade kernel-trace-baseUpgrade kernel-sourceUpgrade kernel-debug-devel-debuginfoUpgrade kernel-trace-devel-debuginfoUpgrade kernel-ec2-debugsourceUpgrade kernel-trace-debuginfoUpgrade kernel-kdumpUpgrade kernel-rt-baseUpgrade drbd-kmp-rtUpgrade kernel-desktop-debuginfoUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-xen-baseUpgrade kernel-symsUpgrade kernel-desktopUpgrade kernel-xen-debuginfoUpgrade kernel-pae-debugsourceUpgrade kernel-iseries64Upgrade kernel-rt_trace-baseUpgrade kernel-xen-debugsourceUpgrade kernel-ppc64Upgrade kernel-pae-base-debuginfoUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-ec2-baseUpgrade kernel-vanilla-devel-debuginfoUpgrade kernel-rt_trace-develUpgrade kernel-vmiUpgrade kernel-default-debuginfoUpgrade ofed-kmp-rtUpgrade kernel-default-baseUpgrade ocfs2-kmp-rtUpgrade kernel-rt_traceUpgrade kernel-pae-devel-debuginfoUpgrade kernel-defaultUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-vanilla-develUpgrade cluster-network-kmp-rt_traceUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-desktop-baseUpgrade brocade-bna-kmp-rtUpgrade kernel-debug-base-debuginfoUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-desktop-base-debuginfoUpgrade kernel-pae-debuginfoUpgrade kernel-vanilla-debuginfoUpgrade kernel-ec2-extraUpgrade kernel-trace-develUpgrade kernel-default-devel-debuginfoUpgrade kernel-trace-base-debuginfoUpgrade kernel-desktop-develUpgrade kernel-smpUpgrade kernel-default-base-debuginfoUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-rtUpgrade kernel-docsUpgrade kernel-vmipaeUpgrade kernel-pae-develUpgrade kernel-syms-rtUpgrade kernel-ec2-debuginfoUpgrade kernel-paeUpgrade kernel-source-rtUpgrade kernel-pae-baseUpgrade kernel-bigsmpUpgrade kernel-xen-base-debuginfoUpgrade ocfs2-kmp-rt_traceUpgrade kernel-debug-debugsourceUpgrade kernel-xenpaeUpgrade kernel-xenUpgrade kernel-trace-debugsourceUpgrade kernel-default-develUpgrade kernel-xen-devel-debuginfoUpgrade kernel-desktop-debugsourceUpgrade kernel-debug-debuginfoUpgrade kernel-desktop-devel-debuginfo | Feb 17, 2015 | Jan 27, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-3.0.0-15-virtualUpgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-2.6.32-37-sparc64-smpUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.32-37-genericUpgrade linux-image-2.6.32-37-lpiaUpgrade linux-image-2.6.35-31-powerpcUpgrade linux-image-2.6.32-37-powerpcUpgrade linux-image-2.6.32-37-virtualUpgrade linux-image-3.0.0-15-powerpc-smpUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.32-37-preemptUpgrade linux-image-2.6.35-31-versatileUpgrade linux-image-2.6.35-31-virtualUpgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.32-37-sparc64Upgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.35-31-genericUpgrade linux-image-2.6.35-31-powerpc-smpUpgrade linux-image-2.6.35-31-generic-paeUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.35-31-omapUpgrade linux-image-3.0.0-15-powerpcUpgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.32-37-generic-paeUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.32-37-386Upgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.32-37-versatileUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.32-37-serverUpgrade linux-image-2.6.32-37-ia64Upgrade linux-image-2.6.32-421-doveUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.32-37-powerpc-smpUpgrade linux-image-2.6.35-31-serverUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-2.6.31-612-imx51Upgrade linux-image-3.0.0-15-genericUpgrade linux-image-2.6.32-341-ec2Upgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-3.0.0-15-serverUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.32-37-powerpc64-smpUpgrade linux-image-3.0.0-15-omapUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.35-31-powerpc64-smp | Nov 8, 2024 | Jan 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub