The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command.
| Software | From | Fixed in |
|---|---|---|
| openafs / openafs | - | 1.6.12.x |