The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-doc | Dec 1, 2016 | Apr 9, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 10, 2011 |
| Suse | — | Upgrade kernel-paeUpgrade kernel-vanilla-develUpgrade kernel-ec2-develUpgrade kernel-bigsmpUpgrade kernel-xenUpgrade kernel-desktop-baseUpgrade kernel-trace-develUpgrade kernel-debug-develUpgrade kernel-kdumpUpgrade kernel-iseries64Upgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-pae-develUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-xenpaeUpgrade kernel-debugUpgrade kernel-desktopUpgrade kernel-xen-develUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-vmipaeUpgrade kernel-ppc64Upgrade kernel-vmi-baseUpgrade kernel-ec2-extraUpgrade kernel-vmi-develUpgrade preload-kmp-defaultUpgrade kernel-smpUpgrade kernel-pae-baseUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-vanilla-baseUpgrade kernel-desktop-develUpgrade kernel-vmiUpgrade kernel-develUpgrade kernel-ec2-baseUpgrade preload-kmp-desktopUpgrade kernel-debug-baseUpgrade kernel-kdumppaeUpgrade kernel-trace | Feb 17, 2015 | Apr 9, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-33-preemptUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-33-sparc64-smpUpgrade linux-image-2.6.32-33-powerpc64-smpUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-33-lpiaUpgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.32-33-virtualUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.24-29-hppa32 | Nov 8, 2024 | Apr 10, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Apr 9, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub