The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "libafsauthent1" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "libafsauthent1-dbgsym" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "libafsrpc1" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "libafsrpc1-dbgsym" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "libkopenafs1" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "libkopenafs1-dbgsym" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "libopenafs-dev" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "libopenafs-dev-dbgsym" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "libpam-openafs-kaserver" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "libpam-openafs-kaserver-dbgsym" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-client" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-client-dbgsym" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-dbg" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-dbserver" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-dbserver-dbgsym" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-doc" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-fileserver" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-fileserver-dbgsym" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-fuse" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-fuse-dbgsym" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-kpasswd" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-kpasswd-dbgsym" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-krb5" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-krb5-dbgsym" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-modules-dkms" }, { "binary_version": "1.6.7-1ubuntu1.1", "binary_name": "openafs-modules-source" } ] }