CVE Request -- kernel: xfs: potential buffer overflow in xfs_readlink()

[Petr Matousek <pmatouse () redhat com>]

A flaw was found in the way Linux kernel's XFS filesystem implementation
handled links with pathname larger than MAXPATHLEN. When
CONFIG_XFS_DEBUG configuration option was not enabled when compiling
Linux kernel, an attacker able to mount malicious XFS image could use
this flaw to crash the system, or potentially, elevate his privileges
on that system.

Proposed upstream patch:
http://oss.sgi.com/archives/xfs/2011-10/msg00345.html

References:
https://bugzilla.redhat.com/show_bug.cgi?id=749156
http://oss.sgi.com/archives/xfs/2011-10/msg00345.html

Thanks,
-- 
Petr Matousek / Red Hat Security Response Team