CVE-2008-3275

The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a…

published August 12, 2008

CVSS
—
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00509 · 42.6th percentile
Published
2008-08-12T23:00Z
EPSS history
Timeline
  • 12 AUG 23:00Z
    The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a…
    cvelistv5