The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-develUpgrade kernel-headers | Dec 1, 2016 | Jun 24, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 24, 2011 |
| Suse | — | Upgrade kernel-paeUpgrade kernel-vanilla-develUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-ec2-extraUpgrade kernel-bigsmpUpgrade kernel-trace-baseUpgrade kernel-vanilla-baseUpgrade kernel-smpUpgrade kernel-develUpgrade kernel-vmi-baseUpgrade preload-kmp-desktopUpgrade kernel-kdumpUpgrade kernel-ec2Upgrade kernel-xenpaeUpgrade kernel-desktop-develUpgrade kernel-vmiUpgrade preload-kmp-defaultUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-vmi-develUpgrade kernel-debugUpgrade kernel-xen-baseUpgrade kernel-debug-baseUpgrade kernel-trace-develUpgrade kernel-default-develUpgrade kernel-iseries64Upgrade kernel-debug-develUpgrade kernel-ec2-develUpgrade kernel-xenUpgrade kernel-desktopUpgrade kernel-pae-develUpgrade kernel-vmipaeUpgrade kernel-ec2-baseUpgrade kernel-vanillaUpgrade kernel-xen-develUpgrade kernel-kdumppaeUpgrade kernel-docsUpgrade kernel-pae-baseUpgrade kernel-symsUpgrade kernel-ppc64Upgrade kernel-desktop-base | Feb 17, 2015 | Jun 24, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.31-610-imx51 | Nov 8, 2024 | Jun 24, 2011 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.0 to build number 787047Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Jun 24, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub