CVE-2011-2928 in Linux Kernel
Summary
The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.
Reservation
07/27/2011
Disclosure
08/29/2011
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 58392 | Linux Kernel befs_follow_link input validation | 20 | Not defined | Official fix | CVE-2011-2928 |