The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-PAE | Dec 1, 2016 | Dec 17, 2007 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 18, 2007 |
| Suse | — | Upgrade kernel-bigsmpUpgrade kernel-iseries64Upgrade kernel-rt_debugUpgrade kernel-kdumpUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-xenpaeUpgrade kernel-ppc64Upgrade kernel-defaultUpgrade kernel-sourceUpgrade suse-releaseUpgrade kernel-symsUpgrade kernel-rt | Feb 17, 2015 | Dec 17, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.15-51-hppa64-smpUpgrade linux-image-2.6.22-14-hppa64Upgrade linux-image-2.6.22-14-powerpc-smpUpgrade linux-image-2.6.15-51-powerpc64-smpUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.22-14-386Upgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.15-51-amd64-genericUpgrade linux-image-2.6.22-14-hppa32Upgrade linux-image-2.6.15-51-amd64-xeonUpgrade linux-image-2.6.15-51-server-bigironUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.22-14-lpiaUpgrade linux-image-2.6.15-51-sparc64-smpUpgrade linux-image-2.6.22-14-sparc64Upgrade linux-image-2.6.15-51-386Upgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.22-14-genericUpgrade linux-image-2.6.22-14-virtualUpgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.15-51-itaniumUpgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.22-14-mckinleyUpgrade linux-image-2.6.15-51-686Upgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.22-14-powerpcUpgrade linux-image-2.6.22-14-xenUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.22-14-cellUpgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.15-51-hppa32-smpUpgrade linux-image-2.6.15-51-hppa32Upgrade linux-image-2.6.22-14-umeUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.22-14-rtUpgrade linux-image-2.6.22-14-serverUpgrade linux-image-2.6.15-51-powerpcUpgrade linux-image-2.6.15-51-mckinley-smpUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.22-14-sparc64-smpUpgrade linux-image-2.6.15-51-amd64-k8Upgrade linux-image-2.6.15-51-serverUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.15-51-amd64-serverUpgrade linux-image-2.6.15-51-hppa64Upgrade linux-image-2.6.22-14-powerpc64-smpUpgrade linux-image-2.6.15-51-powerpc-smpUpgrade linux-image-2.6.15-51-mckinleyUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.15-51-sparc64Upgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.22-14-lpiacompatUpgrade linux-image-2.6.22-14-itaniumUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.15-51-k7Upgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.15-51-itanium-smp | Nov 8, 2024 | Dec 18, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub