CVE-2010-2798

Published: Sep 8, 2010Modified: Apr 29, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c.

Affected (36)

Products: Linux: Linux Kernel · Vmware: Esx · Canonical: Ubuntu Linux · +4 more

Show all products

1 product

1 product

1 product

1 product

7 products

Aura Communication Manager

Aura Presence Services

1 product

3 products

Linux Enterprise High Availability Extension

Suse Linux Enterprise Desktop

Suse Linux Enterprise Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.35

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Vmware Esx	Version 4.0
Vmware Esx	Version 4.1

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 10.10
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 9.04
Canonical Ubuntu Linux	Version 9.10

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 5.0

Configuration E

19 vulnerable

Vulnerable Software	Affected Versions
Avaya Aura Communication Manager	Version 5.2
Avaya Aura Presence Services	Version 6.0
Avaya Aura Presence Services	Version 6.1.1
Avaya Aura Presence Services	Version 6.1
Avaya Aura Session Manager	Version 1.1
Avaya Aura Session Manager	Version 5.2
Avaya Aura Session Manager	Version 6.0
Avaya Aura System Manager	Version 5.2
Avaya Aura System Manager	Version 6.0
Avaya Aura System Manager	Version 6.1.1
Avaya Aura System Manager	Version 6.1
Avaya Aura System Platform	Version 1.1
Avaya Aura System Platform	Version 6.0
Avaya Aura System Platform	Version 6.0 sp1
Avaya Iq	Version 5.0
Avaya Iq	Version 5.1
Avaya Voice Portal	Version 5.0
Avaya Voice Portal	Version 5.1
Avaya Voice Portal	Version 5.1 sp1

Configuration F

7 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.1
Suse Linux Enterprise High Availability Extension	Version 11
Suse Linux Enterprise High Availability Extension	Version 11 sp1
Suse Suse Linux Enterprise Desktop	Version 11
Suse Suse Linux Enterprise Desktop	Version 11 sp1
Suse Suse Linux Enterprise Server	Version 11
Suse Suse Linux Enterprise Server	Version 11 sp1

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (38)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=728a756b8fcd22d80e2dbba8117a8a3aafd3f203

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/46397

Source: secalert@redhat.com

Broken Link

http://securitytracker.com/id?1024386

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://support.avaya.com/css/P8/documents/100113326

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2010/dsa-2094

Source: secalert@redhat.com

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2010:198

Source: secalert@redhat.com

Broken Link

http://www.openwall.com/lists/oss-security/2010/08/02/1

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2010/08/02/10

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0660.html

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2010-0670.html

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2010-0723.html

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/archive/1/520102/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/42124

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1000-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2011-0012.html

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=620300

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=728a756b8fcd22d80e2dbba8117a8a3aafd3f203