The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-PAE-develUpgrade kernel-develUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-xen | Dec 1, 2016 | Oct 13, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Oct 13, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-25-lpia | Nov 8, 2024 | Oct 13, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Oct 13, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub