arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-PAE | Dec 1, 2016 | Nov 5, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 5, 2008 |
| Suse | — | Upgrade kernel-iseries64Upgrade kernel-symsUpgrade suse-releaseUpgrade kernel-kdumpUpgrade kernel-sourceUpgrade kernel-ppc64Upgrade kernel-xenpaeUpgrade kernel-bigsmpUpgrade kernel-xenUpgrade kernel-default | Feb 17, 2015 | Nov 5, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub