The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernelUpgrade kernel-PAEUpgrade kernel-xenUUpgrade kernel-largesmp-develUpgrade kernel-headersUpgrade kernel-largesmpUpgrade kernel-PAE-develUpgrade kernel-smpUpgrade kernel-docUpgrade kernel-smp-develUpgrade kernel-xenU-develUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-debug | Dec 1, 2016 | Aug 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 14, 2009 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-xenUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-paeUpgrade kernel-kdumpUpgrade kernel-vmiUpgrade ext4dev-kmp-vmiUpgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade ext4dev-kmp-paeUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade oracleasm-kmp-defaultUpgrade kernel-xen-baseUpgrade kernel-vmi-baseUpgrade kernel-default-baseUpgrade kernel-ppc64Upgrade ext4dev-kmp-ppc64Upgrade iscsitarget-kmp-default | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.28-15-lpiaUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.28-15-imx51Upgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.28-15-genericUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.28-15-versatileUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.28-15-ixp4xxUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.28-15-iop32xUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.28-15-serverUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.28-15-virtualUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.27-14-virtual | Nov 8, 2024 | Aug 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 14, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub