The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows attackers to cause a denial of service (system crash) via a crafted hfsplus filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-hugemem-develUpgrade kernel-develUpgrade kernel-docUpgrade kernel-smpUpgrade kernelUpgrade kernel-smp-develUpgrade kernel-hugememUpgrade kernel-xenUUpgrade kernel-xenU-devel | Dec 1, 2016 | Nov 5, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 5, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-53-hppa64Upgrade linux-image-2.6.15-53-amd64-serverUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.24-22-itaniumUpgrade linux-image-2.6.24-22-lpiacompatUpgrade linux-image-2.6.24-22-386Upgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.24-22-powerpc-smpUpgrade linux-image-2.6.24-22-sparc64Upgrade linux-image-2.6.15-53-itanium-smpUpgrade linux-image-2.6.24-22-hppa32Upgrade linux-image-2.6.24-22-rtUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.24-22-serverUpgrade linux-image-2.6.15-53-sparc64Upgrade linux-image-2.6.24-22-hppa64Upgrade linux-image-2.6.15-53-powerpc64-smpUpgrade linux-image-2.6.15-53-serverUpgrade linux-image-2.6.24-22-mckinleyUpgrade linux-image-2.6.15-53-amd64-xeonUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.15-53-powerpcUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.15-53-amd64-k8Upgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.15-53-386Upgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.15-53-sparc64-smpUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.15-53-mckinleyUpgrade linux-image-2.6.15-53-server-bigironUpgrade linux-image-2.6.24-22-genericUpgrade linux-image-2.6.15-53-powerpc-smpUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.27-9-genericUpgrade linux-image-2.6.15-53-k7Upgrade linux-image-2.6.24-22-sparc64-smpUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-22-openvzUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.15-53-mckinley-smpUpgrade linux-image-2.6.15-53-686Upgrade linux-image-2.6.15-53-hppa32Upgrade linux-image-2.6.15-53-itaniumUpgrade linux-image-2.6.15-53-hppa64-smpUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.27-9-virtualUpgrade linux-image-2.6.15-53-amd64-genericUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.24-22-lpiaUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.27-9-serverUpgrade linux-image-2.6.24-22-powerpcUpgrade linux-image-2.6.24-22-powerpc64-smpUpgrade linux-image-2.6.15-53-hppa32-smpUpgrade linux-image-2.6.24-22-xenUpgrade linux-image-2.6.24-22-virtual | Nov 8, 2024 | Nov 5, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub