The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-smpUpgrade kernel-smp-develUpgrade kernel-xenU-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-largesmp-develUpgrade kernelUpgrade kernel-xenUUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-largesmpUpgrade kernel-PAE | Dec 1, 2016 | Aug 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 14, 2009 |
| Suse | — | Upgrade slert-releaseUpgrade ofed-kmp-rtUpgrade iscsitarget-kmp-traceUpgrade kernel-paeUpgrade dazuko-kmp-debugUpgrade kvm-kmp-traceUpgrade kernel-debug-baseUpgrade kernel-64k-pagesizeUpgrade kernel-trace-baseUpgrade oracleasm-kmp-traceUpgrade ofedUpgrade pcc-acpi-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade kernel-smpUpgrade iscsitarget-kmp-debugUpgrade acerhk-kmp-debugUpgrade acx-kmp-debugUpgrade omnibook-kmp-debugUpgrade kernel-xenUpgrade kernel-pseries64Upgrade kernel-ec2Upgrade kernel-traceUpgrade kqemu-kmp-traceUpgrade kernel-s390xUpgrade at76_usb-kmp-debugUpgrade kernel-rt_timingUpgrade kernel-kdumpUpgrade atl2-kmp-debugUpgrade kernel-debug-extraUpgrade ofed-docUpgrade kernel-ps3Upgrade virtualbox-ose-kmp-debugUpgrade kernel-bigsmpUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade kqemu-kmp-debugUpgrade ib-bonding-kmp-rt_debugUpgrade lirc-kmp-traceUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-s390x-debugUpgrade kernel-xen-extraUpgrade intel-iamt-heci-kmp-traceUpgrade kernel-s390-debugUpgrade kernel-sn2Upgrade nouveau-kmp-debugUpgrade kernel-trace-extraUpgrade kernel-pmac64Upgrade um-host-kernelUpgrade gspcav-kmp-debugUpgrade vmware-kmp-traceUpgrade drbd-kmp-traceUpgrade kernel-debugUpgrade ofed-kmp-rt_bigsmpUpgrade kernel-rt_bigsmpUpgrade kernel-pae-extraUpgrade vmware-kmp-debugUpgrade wlan-ng-kmp-debugUpgrade kernel-symsUpgrade tpctl-kmp-debugUpgrade kernel-xenpaeUpgrade ib-bonding-kmp-rt_timingUpgrade ofed-kmp-rt_debugUpgrade aufs-kmp-debugUpgrade kernel-rtUpgrade kernel-ec2-baseUpgrade intel-iamt-heci-kmp-debugUpgrade kernel-ppc64Upgrade ofed-kmp-debugUpgrade ivtv-kmp-debugUpgrade kernel-default-baseUpgrade pcfclock-kmp-traceUpgrade dazuko-kmp-traceUpgrade brocade-bfa-kmp-traceUpgrade kernel-vanillaUpgrade virtualbox-ose-kmp-traceUpgrade oracleasm-kmp-debugUpgrade ofed-kmp-traceUpgrade kernel-pae-baseUpgrade kernel-ec2-extraUpgrade aufs-kmp-traceUpgrade ib-bonding-kmp-rtUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-umUpgrade ib-bonding-kmp-rt_bigsmpUpgrade kernel-default-extraUpgrade kernel-ppc64-baseUpgrade brocade-bfa-kmp-debugUpgrade pcfclock-kmp-debugUpgrade ofed-kmp-rt_timingUpgrade kernel-ppc64-extraUpgrade drbd-kmp-debugUpgrade kernel-xen-baseUpgrade kernel-iseries64Upgrade uvcvideo-kmp-debugUpgrade appleir-kmp-debugUpgrade um-host-install-initrdUpgrade kernel-s390Upgrade ofed-cxgb3-NIC-kmp-rt_bigsmp | Feb 17, 2015 | Aug 14, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.28-15-lpiaUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.28-15-genericUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.28-15-imx51Upgrade linux-image-2.6.28-15-versatileUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.28-15-iop32xUpgrade linux-image-2.6.28-15-serverUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.28-15-virtualUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.28-15-ixp4xxUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.24-24-386 | Nov 8, 2024 | Aug 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 14, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub