Severity: Unknown
Affected Package: kernel
Summary: nullfs VOP_LINK allows cross-mount hardlinks between nullfs instances
The nullfs(5) implementation of the VOP_LINK(9) VFS operation does not verify that the source and target of a link reside in the same nullfs instance. A user with read access to one nullfs view and write access to another view of the same underlying filesystem can create a hardlink across them, potentially gaining write access to files on a nominally read-only filesystem. Patch obtained from FreeBSD.
No specific recommendations provided.
Aliases: CVE-2013-5710
Published: September 10, 2013
Last Modified: September 10, 2013