The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-smp-develUpgrade kernel-xenUpgrade kernel-xenU-develUpgrade kernel-smpUpgrade kernel-xen-develUpgrade kernel-largesmp-develUpgrade kernel-xenUUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-largesmpUpgrade kernel-debug-devel | Dec 1, 2016 | Aug 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 14, 2009 |
| Suse | — | Upgrade kernel-kdumpUpgrade ext4dev-kmp-xenUpgrade kernel-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-xenUpgrade kernel-sourceUpgrade ext4dev-kmp-vmiUpgrade kernel-vmiUpgrade kernel-vmi-baseUpgrade iscsitarget-kmp-defaultUpgrade kernel-default-manUpgrade kernel-symsUpgrade ext4dev-kmp-paeUpgrade kernel-pae-baseUpgrade oracleasm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ppc64Upgrade kernel-xen-baseUpgrade kernel-ppc64-baseUpgrade kernel-default-baseUpgrade ext4dev-kmp-ppc64 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.28-15-iop32xUpgrade linux-image-2.6.28-15-serverUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.28-15-ixp4xxUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.28-15-virtualUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.28-15-lpiaUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.28-15-genericUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.28-15-versatileUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.28-15-imx51Upgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.27-14-generic | Nov 8, 2024 | Aug 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 14, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 14, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub