Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for a (1) XFS_IOC_ATTRLIST_BY_HANDLE or (2) XFS_IOC_ATTRLIST_BY_HANDLE_32 ioctl call with a crafted length value, related to the xfs_attrlist_by_handle function in fs/xfs/xfs_ioctl.c and the xfs_compat_attrlist_by_handle function in fs/xfs/xfs_ioctl32.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 27, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 22, 2013 |
| Suse | — | Upgrade kernel-xen-baseUpgrade kernel-default-manUpgrade gfs2-kmp-bigsmpUpgrade hyper-v-kmp-paeUpgrade xen-kmp-paeUpgrade kernel-bigsmp-develUpgrade kernel-vmipaeUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-rt_trace-develUpgrade kernel-trace-baseUpgrade ext4dev-kmp-paeUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-kdumppaeUpgrade kernel-xen-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade ext4dev-kmp-traceUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-ec2-develUpgrade kernel-rt-develUpgrade iscsitarget-kmp-rtUpgrade ocfs2-kmp-xenUpgrade kernel-default-baseUpgrade ofed-kmp-rt_traceUpgrade hyper-v-kmp-defaultUpgrade kernel-kdumpUpgrade ocfs2-kmp-ppc64Upgrade kernel-pae-extraUpgrade kernel-pae-develUpgrade kernel-ec2-baseUpgrade btrfs-kmp-defaultUpgrade kernel-trace-develUpgrade ocfs2-kmp-traceUpgrade kernel-ppc64-baseUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-ppc64Upgrade ocfs2-kmp-paeUpgrade hyper-v-kmp-traceUpgrade cluster-network-kmp-rt_traceUpgrade kernel-smpUpgrade kernel-pae-baseUpgrade cluster-network-kmp-bigsmpUpgrade kernel-xenpaeUpgrade cluster-network-kmp-ppc64Upgrade cluster-network-kmp-paeUpgrade cluster-network-kmp-rtUpgrade btrfs-kmp-paeUpgrade kernel-ppc64-develUpgrade gfs2-kmp-traceUpgrade kernel-ppc64Upgrade sle-hae-releaseUpgrade kernel-ec2Upgrade kernel-traceUpgrade drbd-kmp-rt_traceUpgrade ocfs2-kmp-bigsmpUpgrade kernel-debugUpgrade ofed-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade kernel-rtUpgrade cluster-network-kmp-xenUpgrade ext4dev-kmp-defaultUpgrade gfs2-kmp-xenUpgrade ocfs2-kmp-rtUpgrade xen-kmp-traceUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-default-extraUpgrade kernel-rt_traceUpgrade cluster-network-kmp-defaultUpgrade gfs2-kmp-paeUpgrade kernel-symsUpgrade ocfs2-kmp-rt_traceUpgrade drbd-kmp-rtUpgrade ext4dev-kmp-xenUpgrade lttng-modules-kmp-rtUpgrade kernel-vmiUpgrade kernel-bigsmpUpgrade cluster-network-kmp-traceUpgrade kernel-bigsmp-baseUpgrade btrfs-kmp-xenUpgrade xen-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-xen-extraUpgrade kernel-xenUpgrade kernel-rt_trace-base | Feb 17, 2015 | Nov 26, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-47-genericUpgrade linux-image-3.8.0-38-genericUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-2.6.32-57-386Upgrade linux-image-2.6.32-57-genericUpgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-3.5.0-239-omap4Upgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-2.6.32-57-preemptUpgrade linux-image-2.6.32-57-virtualUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-3.11.0-17-genericUpgrade linux-image-2.6.32-57-ia64Upgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-2.6.32-57-serverUpgrade linux-image-3.5.0-47-highbankUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-2.6.32-57-lpiaUpgrade linux-image-3.2.0-59-omapUpgrade linux-image-3.2.0-59-genericUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-2.6.32-362-ec2Upgrade linux-image-3.2.0-59-highbankUpgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-2.6.32-57-versatileUpgrade linux-image-3.5.0-47-omap | Nov 8, 2024 | Nov 27, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub