Bug 386423

Summary:	Kernel: befs_follow_link() "long symlink" DoS (CVE-2011-2928)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	[linux < 3.1-rc3]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2011-10-08 17:31:45 UTC

CVE-2011-2928 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2928):
  The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel
  before 3.1-rc3 does not validate the length attribute of long symlinks,
  which allows local users to cause a denial of service (incorrect pointer
  dereference and OOPS) by accessing a long symlink on a malformed Be
  filesystem.