VULNERABILITY INTELLIGENCE

CVE-2011-2928

CVSS score4.9 MEDIUM

EPSS probability0.51%

CISA KEVNot currently listed

Published2011-08-29

Last modified2026-06-16

Description

The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.