Description
The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service (incorrect free operations and system crash) via an open system call.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/59262 ↗
- http://www.securityfocus.com/bid/68125 ↗
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=86acdca1b63e6890540fa19495cfc708beff3d8b ↗
- http://secunia.com/advisories/59309 ↗
- http://secunia.com/advisories/59406 ↗
- http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33 ↗
- http://linux.oracle.com/errata/ELSA-2014-0771.html ↗
- http://secunia.com/advisories/59560 ↗
- http://linux.oracle.com/errata/ELSA-2014-3043.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1094363 ↗
- https://github.com/torvalds/linux/commit/86acdca1b63e6890540fa19495cfc708beff3d8b ↗