arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-hugemem-develUpgrade kernel-smpUpgrade kernelUpgrade kernel-hugememUpgrade kernel-xenUUpgrade kernel-xenU-develUpgrade kernel-develUpgrade kernel-smp-devel | Dec 1, 2016 | Mar 25, 2008 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-xenUpgrade kernel-xenpaeUpgrade kernel-kdump | Feb 17, 2015 | Mar 25, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub