The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (prevention of file creation) by leveraging the ability to write to a directory important to the victim, and creating a file with a crafted name that is associated with a specific CRC32C hash value.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2013 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-symsUpgrade xen-kmp-traceUpgrade kernel-pae-develUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-ec2Upgrade kernel-trace-develUpgrade kernel-default-develUpgrade kernel-pae-baseUpgrade kernel-traceUpgrade kernel-trace-baseUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-default-baseUpgrade kernel-xen-extraUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-ppc64Upgrade kernel-pae-extraUpgrade kernel-trace-extraUpgrade kernel-ppc64-develUpgrade kernel-ppc64-baseUpgrade xen-kmp-defaultUpgrade SLES-for-VMware-releaseUpgrade kernel-ec2-baseUpgrade kernel-defaultUpgrade kernel-ec2-devel | Dec 12, 2013 | Feb 18, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-40-genericUpgrade linux-image-3.2.0-56-generic-paeUpgrade linux-image-3.2.0-1440-omap4Upgrade linux-image-3.2.0-56-powerpc64-smpUpgrade linux-image-3.5.0-40-omapUpgrade linux-image-3.2.0-56-powerpc-smpUpgrade linux-image-3.5.0-40-highbankUpgrade linux-image-3.2.0-56-highbankUpgrade linux-image-3.5.0-40-powerpc-smpUpgrade linux-image-3.5.0-232-omap4Upgrade linux-image-3.2.0-56-omapUpgrade linux-image-3.5.0-40-powerpc64-smpUpgrade linux-image-3.2.0-56-virtualUpgrade linux-image-3.2.0-56-generic | Nov 8, 2024 | Feb 18, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub