CVE-2009-0269

Published: 26 January 2009

fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.

From the Ubuntu Security Team

The eCryptfs filesystem did not correctly handle certain VFS return codes. A local attacker with write-access to an eCryptfs filesystem could cause a system crash, leading to a denial of service.

Status

References

• https://ubuntu.com/security/notices/USN-751-1
• https://www.cve.org/CVERecord?id=CVE-2009-0269
• NVD
• Launchpad
• Debian