The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-develUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-PAE-devel | Dec 1, 2016 | Oct 15, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Oct 15, 2008 |
| Suse | — | Upgrade slert-releaseUpgrade kernel-xenUpgrade kernel-rtUpgrade kernel-bigsmpUpgrade kernel-ppc64Upgrade kernel-sourceUpgrade ib-bonding-kmp-rtUpgrade kernel-paeUpgrade ib-bonding-kmp-rt_bigsmpUpgrade ofed-kmp-rt_bigsmpUpgrade ofed-kmp-rt_timingUpgrade ib-bonding-kmp-rt_timingUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-debugUpgrade ofed-docUpgrade kernel-rt_bigsmpUpgrade kernel-rt_timingUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade kernel-kdumpUpgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade kernel-ps3Upgrade kernel-defaultUpgrade ofed-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-xenpaeUpgrade ofed-kmp-rt_debugUpgrade ofedUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade ib-bonding-kmp-rt_debugUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade kernel-docs | Feb 17, 2015 | Oct 15, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.24-22-xenUpgrade linux-image-2.6.27-9-virtualUpgrade linux-image-2.6.15-53-hppa32-smpUpgrade linux-image-2.6.15-53-amd64-xeonUpgrade linux-image-2.6.15-53-itanium-smpUpgrade linux-image-2.6.15-53-mckinley-smpUpgrade linux-image-2.6.24-22-sparc64Upgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.24-22-openvzUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.24-22-sparc64-smpUpgrade linux-image-2.6.24-22-virtualUpgrade linux-image-2.6.15-53-serverUpgrade linux-image-2.6.24-22-mckinleyUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.27-9-serverUpgrade linux-image-2.6.15-53-powerpc64-smpUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.15-53-hppa64-smpUpgrade linux-image-2.6.15-53-sparc64Upgrade linux-image-2.6.27-9-genericUpgrade linux-image-2.6.24-22-rtUpgrade linux-image-2.6.24-22-powerpc-smpUpgrade linux-image-2.6.24-22-lpiacompatUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.15-53-powerpcUpgrade linux-image-2.6.24-22-hppa64Upgrade linux-image-2.6.24-22-lpiaUpgrade linux-image-2.6.15-53-686Upgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.24-22-serverUpgrade linux-image-2.6.15-53-mckinleyUpgrade linux-image-2.6.24-22-powerpc64-smpUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.15-53-hppa64Upgrade linux-image-2.6.15-53-hppa32Upgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.15-53-amd64-genericUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.15-53-powerpc-smpUpgrade linux-image-2.6.15-53-sparc64-smpUpgrade linux-image-2.6.15-53-k7Upgrade linux-image-2.6.24-22-386Upgrade linux-image-2.6.15-53-itaniumUpgrade linux-image-2.6.24-22-powerpcUpgrade linux-image-2.6.24-22-itaniumUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.15-53-server-bigironUpgrade linux-image-2.6.24-22-genericUpgrade linux-image-2.6.24-22-hppa32Upgrade linux-image-2.6.15-53-amd64-k8Upgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.15-53-amd64-serverUpgrade linux-image-2.6.15-53-386 | Nov 8, 2024 | Oct 15, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub