The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-xenUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-xen-devel | Dec 1, 2016 | Oct 15, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Oct 15, 2008 |
| Suse | — | Upgrade kernel-rt_debugUpgrade ofed-kmp-rt_debugUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade ofedUpgrade kernel-docsUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade ib-bonding-kmp-rt_debugUpgrade kernel-kdumpUpgrade kernel-ps3Upgrade ofed-kmp-rtUpgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade kernel-rt_timingUpgrade kernel-debugUpgrade ofed-docUpgrade kernel-rtUpgrade ib-bonding-kmp-rt_timingUpgrade ib-bonding-kmp-rtUpgrade kernel-bigsmpUpgrade slert-releaseUpgrade kernel-sourceUpgrade kernel-ppc64Upgrade kernel-rt_bigsmpUpgrade ofed-kmp-rt_timingUpgrade ib-bonding-kmp-rt_bigsmpUpgrade kernel-paeUpgrade ofed-kmp-rt_bigsmpUpgrade kernel-vanillaUpgrade kernel-symsUpgrade kernel-xen | Feb 17, 2015 | Oct 15, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.24-22-powerpc-smpUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.24-22-virtualUpgrade linux-image-2.6.15-53-amd64-xeonUpgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.24-22-lpiacompatUpgrade linux-image-2.6.27-9-virtualUpgrade linux-image-2.6.27-9-genericUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.15-53-mckinley-smpUpgrade linux-image-2.6.15-53-itanium-smpUpgrade linux-image-2.6.15-53-serverUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.15-53-sparc64Upgrade linux-image-2.6.24-22-mckinleyUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.15-53-hppa32-smpUpgrade linux-image-2.6.24-22-sparc64-smpUpgrade linux-image-2.6.24-22-openvzUpgrade linux-image-2.6.24-22-sparc64Upgrade linux-image-2.6.15-53-powerpc64-smpUpgrade linux-image-2.6.27-9-serverUpgrade linux-image-2.6.24-22-rtUpgrade linux-image-2.6.24-22-xenUpgrade linux-image-2.6.15-53-hppa64-smpUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.24-22-powerpcUpgrade linux-image-2.6.15-53-amd64-genericUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.15-53-itaniumUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.15-53-amd64-serverUpgrade linux-image-2.6.15-53-sparc64-smpUpgrade linux-image-2.6.24-22-hppa64Upgrade linux-image-2.6.15-53-hppa32Upgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.15-53-powerpc-smpUpgrade linux-image-2.6.24-22-powerpc64-smpUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.15-53-amd64-k8Upgrade linux-image-2.6.24-22-itaniumUpgrade linux-image-2.6.15-53-386Upgrade linux-image-2.6.24-22-serverUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.24-22-genericUpgrade linux-image-2.6.24-22-386Upgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.15-53-hppa64Upgrade linux-image-2.6.15-53-mckinleyUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.24-22-hppa32Upgrade linux-image-2.6.24-22-lpiaUpgrade linux-image-2.6.15-53-server-bigironUpgrade linux-image-2.6.15-53-powerpcUpgrade linux-image-2.6.15-53-686Upgrade linux-image-2.6.15-53-k7 | Nov 8, 2024 | Oct 15, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub