imPC@ndo IT

Tracker / CVE-2011-4077

CVE-2011-4077

Medium 6.9

Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.

Affected products and versions

linux linux_kernel · 2.6.12 → 3.0.11
linux linux_kernel · 3.1 → 3.1.5

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References