The UDF filesystem implementation in the Linux kernel before 3.18.2 does not ensure that space is available for storing a symlink target's name along with a trailing \0 character, which allows local users to obtain sensitive information via a crafted filesystem image, related to fs/udf/symlink.c and fs/udf/unicode.c.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 31, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 18, 2014 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Dec 18, 2015 | Jul 31, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-48-powerpc64-smpUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-3.2.0-1461-omap4Upgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.2.0-79-powerpc64-smpUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-3.13.0-48-powerpc-smpUpgrade linux-image-3.13.0-48-powerpc-e500Upgrade linux-image-3.13.0-48-lowlatencyUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.2.0-79-highbankUpgrade linux-image-3.13.0-48-genericUpgrade linux-image-3.2.0-79-powerpc-smpUpgrade linux-image-3.2.0-79-virtualUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-3.2.0-79-genericUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.2.0-79-generic-paeUpgrade linux-image-3.13.0-48-powerpc-e500mcUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.13.0-48-generic-lpaeUpgrade linux-image-3.2.0-79-omapUpgrade linux-image-3.13.0-48-powerpc64-emb | Nov 8, 2024 | Aug 31, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub