The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the stack memory consumption of the (1) arguments and (2) environment for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of service (system crash) via a crafted exec system call, a related issue to CVE-2010-2240.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-doc | Dec 1, 2016 | Nov 30, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 30, 2010 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-debug-baseUpgrade kernel-defaultUpgrade kernel-vanillaUpgrade kernel-ec2-extraUpgrade kernel-default-baseUpgrade kernel-vanilla-baseUpgrade kernel-ec2-baseUpgrade kernel-develUpgrade kernel-desktopUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-vmi-baseUpgrade kernel-vanilla-develUpgrade kernel-desktop-baseUpgrade kernel-source-vanillaUpgrade kernel-ec2Upgrade kernel-xenUpgrade kernel-pae-baseUpgrade kernel-default-develUpgrade kernel-desktop-develUpgrade kernel-traceUpgrade preload-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-trace-develUpgrade preload-kmp-desktopUpgrade kernel-vmi-develUpgrade kernel-pae-develUpgrade kernel-vmiUpgrade kernel-pae | Feb 17, 2015 | Nov 30, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.35-24-virtual | Nov 8, 2024 | Nov 30, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Nov 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub