CVE-2009-0269

Linux Kernel < 2.6.28.1 - Out-of-bounds Write in eCryptfs readlink Error Handling

Title source: llm

Description

fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.

References (27)

Core 27

Core References

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/35390

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34502

Broken Link vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2009-0326.html

Broken Link vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2009:118

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/37471

Broken Link vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2009-0360.html

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

https://lists.launchpad.net/ecryptfs-devel/msg00010.html

Third Party Advisory x_refsource_confirm

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Mailing List vendor-advisory x_refsource_debian

http://www.debian.org/security/2009/dsa-1749

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/33758

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/usn-751-1

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

https://lists.launchpad.net/ecryptfs-devel/msg00011.html

Broken Link vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8169

Broken Link, Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Broken Link x_refsource_confirm

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.1

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

Broken Link x_refsource_confirm

http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=a17d5232de7b53d34229de79ec22f4bb04adb7e4

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34981

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34394

Mailing List vendor-advisory x_refsource_debian

http://www.debian.org/security/2009/dsa-1787

Broken Link, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/48188

Broken Link vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8944

Broken Link, Patch, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/33412

Broken Link vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2009/3316

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/35394

Scores

EPSS 0.0050

EPSS Percentile 39.6%

Details

CWE

CWE-787

Status published

Products (9)

canonical/ubuntu_linux 7.10

canonical/ubuntu_linux 8.04

canonical/ubuntu_linux 8.10

debian/debian_linux 4.0

debian/debian_linux 5.0

linux/linux_kernel < 2.6.28.1

opensuse/opensuse 10.3

opensuse/opensuse 11.0

opensuse/opensuse 11.1

Published Jan 26, 2009

Tracked Since Feb 18, 2026