Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
linux kernel 竞争条件漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux kernel 3.18.9及之前版本的fs/fhandle.c文件中的‘handle_to_path’函数存在竞争条件漏洞。本地攻击者可通过在执行函数时更改文件句柄的‘handle_bytes’值利用该漏洞绕过既定的大小限制，读取附加的内存位置。
CVSS Information
N/A
Vulnerability Type
N/A