Name | CVE-2011-3353 |
Description | Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of service (BUG_ON and system crash) by leveraging the ability to mount a FUSE filesystem. |
Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
References | DSA-2389-1 |
The information below is based on the following data on fixed versions.
Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
---|---|---|---|---|---|---|
linux-2.6 | source | lenny | (not affected) | |||
linux-2.6 | source | squeeze | 2.6.32-39squeeze1 | DSA-2389-1 | ||
linux-2.6 | source | (unstable) | 3.1.0~rc4-1~experimental.1 | low |
[lenny] - linux-2.6 <not-affected> (vulnerable code introduced in commit 3b463ae0)