CVE-2010-2798

EUVD-2010-2802
The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
𝑥
< 2.6.35
vmwareesx
4.0
vmwareesx
4.1
canonicalubuntu_linux
6.06
canonicalubuntu_linux
8.04
canonicalubuntu_linux
9.04
canonicalubuntu_linux
9.10
canonicalubuntu_linux
10.04
canonicalubuntu_linux
10.10
debiandebian_linux
5.0
avayaaura_communication_manager
5.2
avayaaura_presence_services
6.0
avayaaura_presence_services
6.1
avayaaura_presence_services
6.1.1
avayaaura_session_manager
1.1
avayaaura_session_manager
5.2
avayaaura_session_manager
6.0
avayaaura_system_manager
5.2
avayaaura_system_manager
6.0
avayaaura_system_manager
6.1
avayaaura_system_manager
6.1.1
avayaaura_system_platform
1.1
avayaaura_system_platform
6.0
avayaaura_system_platform
6.0:sp1
avayaiq
5.0
avayaiq
5.1
avayavoice_portal
5.0
avayavoice_portal
5.1
avayavoice_portal
5.1:sp1
opensuseopensuse
11.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
dapper
dne
hardy
Fixed 2.6.24-28.80
released
jaunty
Fixed 2.6.28-19.66
released
karmic
Fixed 2.6.31-22.67
released
lucid
not-affected
maverick
not-affected
linux-ec2
dapper
dne
hardy
dne
karmic
Fixed 2.6.31-307.21
released
lucid
Fixed 2.6.32-309.18
released
maverick
ignored
linux-fsl-imx51
dapper
dne
hardy
dne
karmic
Fixed 2.6.31-112.30
released
lucid
Fixed 2.6.31-608.22
released
maverick
dne
linux-lts-backport-maverick
dapper
dne
hardy
dne
karmic
dne
lucid
Fixed 2.6.35-25.44~lucid1
released
maverick
dne
linux-source-2.6.15
dapper
not-affected
hardy
dne
jaunty
dne
karmic
dne
lucid
dne
maverick
dne
References