fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-doc | Dec 1, 2016 | Sep 29, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 29, 2008 |
| Suse | — | Upgrade suse-releaseUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-ppc64Upgrade kernel-bigsmpUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-iseries64Upgrade kernel-xenpaeUpgrade kernel-xen | Feb 17, 2015 | Sep 29, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub