NetSight
IP …
medium5.5

CVE-2008-3275

The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a c…

Impact

The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.25.15
DebianDebian Linux
Version 4.0
CanonicalUbuntu Linux
Versions 6.06, 7.04, 7.10, 8.04
SuseSuse Linux Enterprise Desktop
Version 10
SuseSuse Linux Enterprise Server
Version 10

Weakness classification

CWE-120

References