>> Linux Kernel VFS Lookup Local Denial of Service Vulnerability
Title : Linux Kernel VFS Lookup Local Denial of Service Vulnerability VUPEN ID : VUPEN/ADV-2008-2430 CVE ID : CVE-2008-3275 CWE ID : CWE-399
Rated as : Low Risk
Remotely Exploitable : No Locally Exploitable : Yes Release Date : 2008-08-25
Technical Description
A vulnerability has been identified in Linux Kernel, which could be exploited by local attackers to cause a denial of service. This issue is caused by errors in the "real_lookup()" and "__lookup_hash()" [fs/namei.c] functions that do not prevent creation of a child dentry for a deleted (S_DEAD) directory, which could cause the UBIFS orphan area to overflow, leading to a denial of service.
