EUVD-2008-3263

Malware in sbrugna...

CVE-2008-3275: Buffer Copy without Checking Size of Input

The 1 reallookup and 2 lookuphash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted aka SDEAD directory, which allows local users to cause a denial of service "overflow" of the UBIFS orphan area via a...