Linux Kernel 'fs/btrfs/ioctl.c' Local Privilege Escalation Vulnerability

Bugtraq ID:	46301
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Feb 09 2011 12:00AM
Updated:	Feb 09 2011 12:00AM
Credit:	Dan Rosenburg
Vulnerable:	Linux kernel 2.6.37 Linux kernel 2.6.37-rc7 Linux kernel 2.6.37-rc2 Linux kernel 2.6.37-rc1
Not Vulnerable:

Linux Kernel 'fs/btrfs/ioctl.c' Local Privilege Escalation Vulnerability

The Linux kernel is prone to a local privilege-escalation vulnerability because of an integer-overflow error.

Local attackers can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts will cause a denial-of-service condition.

Linux Kernel 'fs/btrfs/ioctl.c' Local Privilege Escalation Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Linux Kernel 'fs/btrfs/ioctl.c' Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.

Linux Kernel 'fs/btrfs/ioctl.c' Local Privilege Escalation Vulnerability

References:

• [PATCH] btrfs: prevent heap corruption in btrfs_ioctl_space_info() (Linux)
  
• Linux Homepage (Linux)