PublicDate: 2008-08-12 23:41:00 UTC
Candidate: CVE-2008-3275
References: 
 https://ubuntu.com/security/notices/USN-637-1
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3275
Description:
 The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the
 vfs implementation in the Linux kernel before 2.6.25.15 do not prevent
 creation of a child dentry for a deleted (aka S_DEAD) directory, which
 allows local users to cause a denial of service ("overflow" of the UBIFS
 orphan area) via a series of attempted file creations within deleted
 directories.
Ubuntu-Description: 
 Zoltan Sogor discovered that new directory entries could be added to
 already deleted directories.  A local attacker could exploit this,
 filling up available memory and disk space, leading to a denial of
 service.
Notes: 
Bugs: 
Priority: medium
Discovered-by:
Assigned-to: kees
CVSS:
 nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H [5.5 MEDIUM]

Patches_linux-source-2.6.15:
upstream_linux-source-2.6.15: released (2.6.27~rc1)
dapper_linux-source-2.6.15: released (2.6.15-52.71)
feisty_linux-source-2.6.15: DNE
gutsy_linux-source-2.6.15: DNE
hardy_linux-source-2.6.15: DNE
devel_linux-source-2.6.15: DNE

Patches_linux-source-2.6.20:
upstream_linux-source-2.6.20: released (2.6.27~rc1)
dapper_linux-source-2.6.20: DNE
feisty_linux-source-2.6.20: released (2.6.20-17.39)
gutsy_linux-source-2.6.20: DNE
hardy_linux-source-2.6.20: DNE
devel_linux-source-2.6.20: DNE

Patches_linux-source-2.6.22:
upstream_linux-source-2.6.22: released (2.6.27~rc1)
dapper_linux-source-2.6.22: DNE
feisty_linux-source-2.6.22: DNE
gutsy_linux-source-2.6.22: released (2.6.22-15.58)
hardy_linux-source-2.6.22: DNE
devel_linux-source-2.6.22: DNE

Patches_linux:
 upstream: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d70b67c8bc72ee23b55381bd6a884f4796692f77
upstream_linux: released (2.6.27~rc1)
dapper_linux: DNE
feisty_linux: DNE
gutsy_linux: DNE
hardy_linux: released (2.6.24-19.41)
devel_linux: released (2.6.27-2.3)