Multiple Linux Kernel eCryptfs Vulnerabilities

Release date:
Updated on:

Affected Systems:
Linux kernel 2.6.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 49108
CVE (CAN) ID: CVE-2011-1831, CVE-2011-1832, CVE-2011-1833, CVE-2011-1834, CVE-2011-1835, CVE-2011-1836

Linux Kernel is the Kernel of the Linux operating system.

Linux Kernel has multiple vulnerabilities that affect the eCryptfs file system. Local attackers can exploit these vulnerabilities to gain improved permissions and bypass security restrictions to obtain sensitive information, perform unauthorized operations or trigger denial of service conditions.

<* Source: Vasiliy Kulikov (segoon@openwall.com)
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.kernel.org/