CVE-2010-2798

HIGH

Linux Kernel < 2.6.35 - Denial of Service via GFS2 Directory Entry Renaming

Title source: llm
STIX 2.1

Description

The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c.

References (19)

Core 19
Core References
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/08/02/10
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0723.html
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1000-1
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/520102/100/0/threaded
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/46397
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/42124
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0670.html
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0660.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=620300
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1024386
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/08/02/1
Third Party Advisory x_refsource_confirm
http://www.vmware.com/security/advisories/VMSA-2011-0012.html
Third Party Advisory x_refsource_confirm
http://support.avaya.com/css/P8/documents/100113326
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2010/dsa-2094
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html

Scores

CVSS v3 7.8
EPSS 0.0005
EPSS Percentile 16.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-476
Status published
Products (31)
avaya/aura_communication_manager 5.2
avaya/aura_presence_services 6.0
avaya/aura_presence_services 6.1
avaya/aura_presence_services 6.1.1
avaya/aura_session_manager 1.1
avaya/aura_session_manager 5.2
avaya/aura_session_manager 6.0
avaya/aura_system_manager 5.2
avaya/aura_system_manager 6.0
avaya/aura_system_manager 6.1
... and 21 more
Published Sep 08, 2010
Tracked Since Feb 18, 2026