The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel | Dec 1, 2016 | Oct 13, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Oct 13, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.28-16-generic | Nov 8, 2024 | Oct 13, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Oct 13, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub