Описание
The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this file as a donor.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | released | 2.6.36-0.1 |
| hardy | not-affected | |
| jaunty | ignored | end of life |
| karmic | released | 2.6.31-22.70 |
| lucid | released | 2.6.32-25.43 |
| maverick | released | 2.6.35-14.19 |
| upstream | released | 2.6.35~rc6 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | DNE | |
| hardy | DNE | |
| lucid | released | 2.6.32-311.23 |
| maverick | ignored | end of life |
| natty | DNE | |
| upstream | released | 2.6.35~rc6 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | DNE | |
| hardy | DNE | |
| karmic | DNE | |
| lucid | released | 2.6.35-25.44~lucid1 |
| maverick | DNE | |
| upstream | released | 2.6.35~rc6 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | not-affected | |
| devel | DNE | |
| hardy | DNE | |
| jaunty | DNE | |
| karmic | DNE | |
| lucid | DNE | |
| maverick | DNE | |
| upstream | released | 2.6.35~rc6 |
Показывать по
EPSS
6.6 Medium
CVSS2
7.1 High
CVSS3
Связанные уязвимости
The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this file as a donor.
The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel ...
The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this file as a donor.
EPSS
6.6 Medium
CVSS2
7.1 High
CVSS3