CVE-2011-2928: Null Pointer Dereference
Last updated 24 July 2024
Other sources
The befsfollowlink function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2928?
CVE-2011-2928 has a severity rating that may lead to denial of service due to improper handling of long symlinks.
How do I fix CVE-2011-2928?
To fix CVE-2011-2928, upgrade the Linux kernel to version 3.1 or later.
Which Linux kernel versions are affected by CVE-2011-2928?
CVE-2011-2928 affects Linux kernel versions prior to 3.1-rc3.
What is the impact of CVE-2011-2928 on local users?
Local users can exploit CVE-2011-2928 to cause a denial of service by accessing crafted long symlinks.
Where is the vulnerability CVE-2011-2928 located in the Linux kernel?
CVE-2011-2928 is located in the befs_follow_link function in the fs/befs/linuxvfs.c file.