VulnerabilityModified

CVE-2011-0463

The ocfs2_prepare_page_for_write function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 (OCFS2) subsystem in the Linux kernel before 2.6.39-rc1 does not properly handle holes that cross page boundaries, which allows local users to obtain…

LOW 2.1EPSS 0.52%

Does this matter?

Lower severity and a low EPSS score (0.52%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS: 0.52% probability · 43th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: linux/linux kernel · canonical/ubuntu linux
Source: cve@mitre.org

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=272b62c1f0f6f742046e45b50b6fec98860208a0
http://oss.oracle.com/pipermail/ocfs2-devel/2011-February/007846.htmlExploit, Patch, Third Party Advisory
http://secunia.com/advisories/43966Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.39-rc1Release Notes, Vendor Advisory
http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
https://bugzilla.novell.com/show_bug.cgi?id=673037Exploit, Issue Tracking, Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=272b62c1f0f6f742046e45b50b6fec98860208a0
http://oss.oracle.com/pipermail/ocfs2-devel/2011-February/007846.htmlExploit, Patch, Third Party Advisory
http://secunia.com/advisories/43966Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.39-rc1Release Notes, Vendor Advisory
http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
https://bugzilla.novell.com/show_bug.cgi?id=673037Exploit, Issue Tracking, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.