Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.18. It arises from the failure to hash dentrys prior to their detachment, resulting in a race condition between detachmounts and ddelete. This may expose the contents of hidden files mounted on the system...

CVE-2009-2908: Undefined Security Weakness

The ddelete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service kernel OOPS and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a...

Linux Kernel eCryptfs空指针引用本地拒绝服务漏洞

BUGTRAQ ID: 36639 CVE ID: CVE-2009-2908 Linux Kernel是开放源码操作系统Linux所使用的内核。 在对低位的dentry调用vfsunlink时，如果dcount为1则ddelete会将dentry转换为负数的dentry。在执行read或write时ecryptfsreadupdateatime或ecryptfsgetxattr中引用了负数的 dentry会触发空指针引用，导致拒绝服务的情况。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...