CVE-2011-2928

Linux Kernel < 3.1 - Denial of Service via Malformed Be Filesystem Long Symlink

Title source: llm
STIX 2.1

Description

The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.

References (9)

Core 9
Core References
Exploit, Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/08/19/5
Exploit, Third Party Advisory x_refsource_misc
http://www.pre-cert.de/advisories/PRE-SA-2011-06.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/49256
Exploit, Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/08/19/1
Exploit, Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/519387/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/69343
Exploit, Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8360

Scores

EPSS 0.0051
EPSS Percentile 39.5%

Details

CWE
CWE-476
Status published
Products (2)
linux/linux_kernel 3.1 (3 CPE variants)
linux/linux_kernel < 3.1
Published Aug 29, 2011
Tracked Since Feb 18, 2026