CVE-2011-2928 Null dereference in n/a
Local attackers can cause a denial of service via incorrect pointer dereference when accessing malformed Be filesystem symlinks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-2928?
CVE-2011-2928 is a medium-severity vulnerability in Linux kernel, published on 29 Aug 2011. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.
Weakness: CWE-476
Which versions are affected by CVE-2011-2928?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2011-2928?
Upgrade to a fixed version.
Is CVE-2011-2928 being exploited?
There is no known exploitation of CVE-2011-2928 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-xfqf-cw5p-jvwq.