Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux内核函数d_path()路径截断漏洞
Vulnerability Description
Linux内核函数d_path()根据dentry结构生成一个ASCII形式的绝对路径。 问题在于生成的绝对路径被存放在一个固定长度(PAGE_SIZE)的缓冲区中。如果dentry结构对应的路径长度超过(PAGE_SIZE - 1)，d_path()先截断路径后保存之，但没有报告这个错误。 getcwd(2)、readlink(2)等系统调用使用到d_path()函数，这会导致返回的绝对路径不是你所期望的那个，带来潜在的安全问题。
CVSS Information
N/A
Vulnerability Type
N/A