| Severity : |
Medium
|
| Published : |
2010-09-30
|
| Modified : |
2012-03-19
|
| Base Score : |
6.3
|
| Details : |
The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this file as a donor.
|
| Product/Version : |
MVL6 Kernel 2.6.29
|
|