Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel do_splice_from()本地绕过安全限制漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel的fs/splice.c文件中的do_splice_from函数没有拒绝设置了O_APPEND标记的文件描述符，本地用户可以绕过append模式对文件的其他位置执行任意更改。
CVSS Information
N/A
Vulnerability Type
N/A