The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to (1) the default configuration of the allow_unconfined_mmap_low boolean in SELinux on Red Hat Enterprise Linux (RHEL) 5, (2) an error that causes allow_unconfined_mmap_low to be ignored in the unconfined_t domain, (3) lack of a requirement for the CAP_SYS_RAWIO capability for these mmap operations, and (4) interaction between the mmap_min_addr protection mechanism and certain application programs.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-xen | Dec 1, 2016 | Aug 28, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 28, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-25-generic | Nov 8, 2024 | Aug 28, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Aug 28, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub