CVE-2011-2928

Description

The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/69343

http://www.securityfocus.com/bid/49256

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=338d0f0a6fbc82407864606f5b64b75aeb3c70f2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3