Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-firmwareUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-develUpgrade perfUpgrade python-perf | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Suse | — | Upgrade kernel-pae-develUpgrade ocfs2-kmp-rtUpgrade kernel-smpUpgrade kernel-debug-base-debuginfoUpgrade kernel-default-develUpgrade ocfs2-kmp-rt_traceUpgrade kernel-paeUpgrade kernel-desktop-baseUpgrade cluster-network-kmp-rt_traceUpgrade kernel-vmipaeUpgrade kernel-docsUpgrade kernel-pae-devel-debuginfoUpgrade kernel-vanilla-debuginfoUpgrade kernel-trace-base-debuginfoUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-desktop-debugsourceUpgrade kernel-xen-devel-debuginfoUpgrade kernel-vanilla-develUpgrade kernel-rt_traceUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-debug-debuginfoUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-source-rtUpgrade kernel-pae-baseUpgrade kernel-xenpaeUpgrade kernel-rtUpgrade kernel-ec2Upgrade kernel-desktop-base-debuginfoUpgrade kernel-defaultUpgrade kernel-debug-debugsourceUpgrade kernel-pae-debuginfoUpgrade kernel-default-base-debuginfoUpgrade kernel-vanilla-base-debuginfoUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade brocade-bna-kmp-rtUpgrade kernel-bigsmpUpgrade kernel-default-devel-debuginfoUpgrade kernel-trace-debugsourceUpgrade kernel-xen-base-debuginfoUpgrade kernel-ec2-debuginfoUpgrade kernel-syms-rtUpgrade kernel-trace-baseUpgrade kernel-default-debugsourceUpgrade drbd-kmp-rtUpgrade kernel-rt_trace-baseUpgrade kernel-xen-debugsourceUpgrade kernel-trace-devel-debuginfoUpgrade kernel-sourceUpgrade kernel-debug-baseUpgrade kernel-rt_trace-develUpgrade kernel-traceUpgrade kernel-desktop-debuginfoUpgrade kernel-ppc64Upgrade kernel-iseries64Upgrade kernel-xen-debuginfoUpgrade drbd-kmp-rt_traceUpgrade kernel-default-debuginfoUpgrade iscsitarget-kmp-rtUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-ec2-base-debuginfoUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-debug-devel-debuginfoUpgrade kernel-pae-base-debuginfoUpgrade ofed-kmp-rtUpgrade kernel-kdumpUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-vanilla-devel-debuginfoUpgrade kernel-kdumppaeUpgrade kernel-pae-debugsourceUpgrade kernel-vanilla-baseUpgrade kernel-vanillaUpgrade kernel-symsUpgrade kernel-ec2-debugsourceUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-baseUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-xen-develUpgrade cluster-network-kmp-rtUpgrade kernel-desktopUpgrade kernel-desktop-develUpgrade kernel-ec2-baseUpgrade kernel-vanilla-debugsourceUpgrade kernel-trace-debuginfoUpgrade kernel-vmiUpgrade kernel-xen-base | Feb 17, 2015 | Jan 27, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-37-generic-paeUpgrade linux-image-2.6.32-37-powerpc64-smpUpgrade linux-image-2.6.35-31-serverUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.32-341-ec2Upgrade linux-image-2.6.32-421-doveUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.38-13-omapUpgrade linux-image-3.0.0-15-powerpcUpgrade linux-image-2.6.32-37-serverUpgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.32-37-versatileUpgrade linux-image-3.0.0-15-serverUpgrade linux-image-2.6.31-612-imx51Upgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.35-31-powerpc64-smpUpgrade linux-image-2.6.32-37-powerpc-smpUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.32-37-ia64Upgrade linux-image-3.0.0-15-omapUpgrade linux-image-3.0.0-15-genericUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.32-37-386Upgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.35-31-generic-paeUpgrade linux-image-3.0.0-15-virtualUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.35-31-omapUpgrade linux-image-2.6.32-37-lpiaUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.32-37-genericUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.32-37-preemptUpgrade linux-image-2.6.32-37-powerpcUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-2.6.38-13-versatileUpgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.35-31-versatileUpgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.35-31-virtualUpgrade linux-image-2.6.35-31-genericUpgrade linux-image-2.6.32-37-virtualUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-3.0.0-15-powerpc-smpUpgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.32-37-sparc64-smpUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.35-31-powerpc-smpUpgrade linux-image-2.6.35-31-powerpcUpgrade linux-image-2.6.32-37-sparc64Upgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.38-13-powerpc-smp | Nov 8, 2024 | Jan 27, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub