The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to the bottom page of a shared memory segment, as demonstrated by a memory-exhaustion attack against the X.Org X server.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-largesmp-develUpgrade kernel-headersUpgrade kernel-largesmpUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-xenUUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-xenU-develUpgrade kernel-xen-develUpgrade kernel-smpUpgrade kernel-smp-develUpgrade kernel-debugUpgrade kernel-doc | Dec 1, 2016 | Sep 3, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 3, 2010 |
| Suse | — | Upgrade xorg-x11-server-rdpUpgrade xorg-x11-XvncUpgrade xorg-x11-server-dmxUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-extraUpgrade xorg-x11-serverUpgrade xorg-x11-server-wayland | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-308-ec2Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.32-24-386Upgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.32-24-ia64Upgrade linux-image-2.6.32-208-doveUpgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-24-serverUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.33-502-omapUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.32-24-versatileUpgrade linux-image-2.6.15-55-amd64-server | Nov 8, 2024 | Sep 3, 2010 |
| Vmsa 2011 0007 | — | Upgrade VMware ESX 4.1 to build number 381591 | May 12, 2011 | Apr 28, 2011 |
| Vmsa 2011 0009 | — | Upgrade VMware ESX 3.5 to build number 391406 | Jun 6, 2011 | Sep 3, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub