NetSight
high7.8

CVE-2010-2798

The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel di…

Impact

The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.35
VmwareEsx
Versions 4.0, 4.1
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.04, 9.10, 10.04, 10.10
DebianDebian Linux
Version 5.0
AvayaAura Communication Manager
Version 5.2
AvayaAura Presence Services
Versions 6.0, 6.1, 6.1.1
AvayaAura Session Manager
Versions 1.1, 5.2, 6.0
AvayaAura System Manager
Versions 5.2, 6.0, 6.1, 6.1.1
AvayaAura System Platform
Versions 1.1, 6.0
AvayaIq
Versions 5.0, 5.1
AvayaVoice Portal
Versions 5.0, 5.1
OpensuseOpensuse
Version 11.1

Weakness classification

References