Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-headers | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Suse | — | Upgrade kernel-develUpgrade kernel-symsUpgrade cluster-network-kmp-rtUpgrade kernel-ec2-debugsourceUpgrade kernel-pae-base-debuginfoUpgrade kernel-pae-debugsourceUpgrade kernel-trace-devel-debuginfoUpgrade kernel-xen-develUpgrade kernel-rt_trace-baseUpgrade ofed-kmp-rtUpgrade kernel-kdumppaeUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade drbd-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rt_trace-develUpgrade kernel-debug-devel-debuginfoUpgrade kernel-vanilla-devel-debuginfoUpgrade iscsitarget-kmp-rtUpgrade kernel-rt-develUpgrade kernel-vmiUpgrade kernel-default-debugsourceUpgrade kernel-desktop-debuginfoUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-trace-baseUpgrade kernel-desktopUpgrade kernel-ec2-base-debuginfoUpgrade kernel-rt-baseUpgrade kernel-xen-debugsourceUpgrade kernel-default-debuginfoUpgrade kernel-traceUpgrade kernel-vanillaUpgrade kernel-vanilla-baseUpgrade drbd-kmp-rt_traceUpgrade kernel-desktop-develUpgrade kernel-debug-baseUpgrade kernel-trace-debuginfoUpgrade kernel-kdumpUpgrade kernel-iseries64Upgrade kernel-debug-develUpgrade kernel-vanilla-debugsourceUpgrade kernel-ec2-baseUpgrade kernel-ppc64Upgrade kernel-xen-baseUpgrade kernel-debugUpgrade kernel-xen-debuginfoUpgrade ocfs2-kmp-rt_traceUpgrade kernel-desktop-baseUpgrade kernel-debug-debuginfoUpgrade kernel-desktop-base-debuginfoUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-smpUpgrade kernel-debug-base-debuginfoUpgrade kernel-default-base-debuginfoUpgrade brocade-bna-kmp-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-rtUpgrade kernel-desktop-debugsourceUpgrade kernel-vanilla-debuginfoUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-ec2-extraUpgrade kernel-trace-develUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-default-devel-debuginfoUpgrade kernel-debug-debugsourceUpgrade kernel-ec2-develUpgrade kernel-xen-devel-debuginfoUpgrade kernel-defaultUpgrade kernel-trace-base-debuginfoUpgrade kernel-xen-base-debuginfoUpgrade kernel-pae-debuginfoUpgrade kernel-bigsmpUpgrade kernel-rt_traceUpgrade kernel-pae-develUpgrade kernel-pae-baseUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-xenpaeUpgrade kernel-vmipaeUpgrade kernel-syms-rtUpgrade kernel-paeUpgrade kernel-ec2-debuginfoUpgrade kernel-source-rtUpgrade kernel-xenUpgrade ocfs2-kmp-rtUpgrade kernel-pae-devel-debuginfoUpgrade kernel-default-develUpgrade kernel-trace-debugsourceUpgrade kernel-vanilla-devel | Feb 17, 2015 | Jan 27, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-37-sparc64Upgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.32-37-lpiaUpgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.32-37-powerpcUpgrade linux-image-2.6.32-37-sparc64-smpUpgrade linux-image-2.6.35-31-omapUpgrade linux-image-2.6.35-31-virtualUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-2.6.32-37-virtualUpgrade linux-image-2.6.35-31-genericUpgrade linux-image-2.6.32-37-genericUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-3.0.0-15-powerpc-smpUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-3.0.0-15-virtualUpgrade linux-image-2.6.35-31-powerpc-smpUpgrade linux-image-2.6.35-31-powerpcUpgrade linux-image-2.6.35-31-generic-paeUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.35-31-versatileUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-37-preemptUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.32-37-powerpc64-smpUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.32-37-generic-paeUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.35-31-powerpc64-smpUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-3.0.0-15-omapUpgrade linux-image-2.6.32-421-doveUpgrade linux-image-2.6.31-612-imx51Upgrade linux-image-2.6.32-37-ia64Upgrade linux-image-2.6.32-37-versatileUpgrade linux-image-3.0.0-15-serverUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-3.0.0-15-genericUpgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-3.0.0-15-powerpcUpgrade linux-image-2.6.32-37-powerpc-smpUpgrade linux-image-2.6.32-341-ec2Upgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-2.6.35-31-serverUpgrade linux-image-2.6.32-37-serverUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.32-37-386Upgrade linux-image-2.6.38-13-powerpc64-smp | Nov 8, 2024 | Jan 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub