CVE-2011-2928

Published: Aug 29, 2011Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.

Affected (4)

Products: Linux: Linux Kernel

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.1
Linux Linux Kernel	Version 3.1
Linux Linux Kernel	Version 3.1 rc1
Linux Linux Kernel	Version 3.1 rc2

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (18)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=338d0f0a6fbc82407864606f5b64b75aeb3c70f2

Source: secalert@redhat.com

http://securityreason.com/securityalert/8360

Source: secalert@redhat.com

ExploitThird Party Advisory

http://www.kernel.org/pub/linux/kernel/v3.0/testing/ChangeLog-3.1-rc3

Source: secalert@redhat.com

Broken Link

http://www.openwall.com/lists/oss-security/2011/08/19/1

Source: secalert@redhat.com

ExploitMailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/08/19/5

Source: secalert@redhat.com

ExploitMailing ListPatchThird Party Advisory

http://www.pre-cert.de/advisories/PRE-SA-2011-06.txt

Source: secalert@redhat.com

ExploitThird Party Advisory

http://www.securityfocus.com/archive/1/519387/100/0/threaded

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/49256

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/69343

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=338d0f0a6fbc82407864606f5b64b75aeb3c70f2

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/8360

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

http://www.kernel.org/pub/linux/kernel/v3.0/testing/ChangeLog-3.1-rc3

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.openwall.com/lists/oss-security/2011/08/19/1

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/08/19/5

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListPatchThird Party Advisory

http://www.pre-cert.de/advisories/PRE-SA-2011-06.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

http://www.securityfocus.com/archive/1/519387/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/49256

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/69343

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.