Multiple race conditions in the madvise_remove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local users to cause a denial of service (use-after-free and system crash) via vectors involving a (1) munmap or (2) close system call.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-PAEUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-PAE-develUpgrade python-perfUpgrade perfUpgrade kernel | Dec 1, 2016 | Oct 3, 2012 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 4, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Oct 3, 2012 |
| Suse | — | Upgrade kernel-trace-baseUpgrade kernel-pae-develUpgrade btrfs-kmp-defaultUpgrade hyper-v-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-ec2-develUpgrade xen-kmp-defaultUpgrade xen-kmp-paeUpgrade kernel-defaultUpgrade hyper-v-kmp-traceUpgrade ext4dev-kmp-xenUpgrade kernel-default-baseUpgrade kernel-ec2-baseUpgrade ext4dev-kmp-traceUpgrade kernel-pae-baseUpgrade kernel-paeUpgrade kernel-ec2Upgrade btrfs-kmp-paeUpgrade kernel-xen-develUpgrade kernel-default-manUpgrade ext4dev-kmp-paeUpgrade kernel-xenUpgrade btrfs-kmp-xenUpgrade kernel-sourceUpgrade xen-kmp-traceUpgrade kernel-traceUpgrade kernel-xen-baseUpgrade kernel-default-develUpgrade ext4dev-kmp-defaultUpgrade kernel-symsUpgrade hyper-v-kmp-pae | Jan 12, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-24-genericUpgrade linux-image-2.6.32-43-genericUpgrade linux-image-3.2.0-29-powerpc64-smpUpgrade linux-image-2.6.32-43-powerpcUpgrade linux-image-2.6.32-43-sparc64Upgrade linux-image-2.6.38-16-virtualUpgrade linux-image-2.6.38-16-powerpc-smpUpgrade linux-image-3.2.0-29-generic-paeUpgrade linux-image-3.0.0-24-powerpc64-smpUpgrade linux-image-2.6.32-43-virtualUpgrade linux-image-3.2.0-29-powerpc-smpUpgrade linux-image-2.6.38-16-generic-paeUpgrade linux-image-3.2.0-1417-omap4Upgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-43-powerpc64-smpUpgrade linux-image-3.0.0-24-powerpc-smpUpgrade linux-image-3.2.0-29-virtualUpgrade linux-image-2.6.32-43-generic-paeUpgrade linux-image-2.6.38-16-powerpc64-smpUpgrade linux-image-2.6.38-16-omapUpgrade linux-image-3.0.0-24-virtualUpgrade linux-image-3.0.0-24-generic-paeUpgrade linux-image-2.6.32-43-versatileUpgrade linux-image-2.6.32-43-powerpc-smpUpgrade linux-image-2.6.32-43-sparc64-smpUpgrade linux-image-3.0.0-1214-omap4Upgrade linux-image-2.6.32-43-serverUpgrade linux-image-3.0.0-24-omapUpgrade linux-image-2.6.38-16-powerpcUpgrade linux-image-2.6.38-16-versatileUpgrade linux-image-2.6.38-16-serverUpgrade linux-image-3.2.0-29-highbankUpgrade linux-image-2.6.32-43-386Upgrade linux-image-2.6.38-16-genericUpgrade linux-image-3.2.0-29-omapUpgrade linux-image-2.6.32-43-lpiaUpgrade linux-image-3.0.0-24-powerpcUpgrade linux-image-2.6.32-348-ec2Upgrade linux-image-2.6.32-43-preemptUpgrade linux-image-2.6.32-43-ia64Upgrade linux-image-3.0.0-24-serverUpgrade linux-image-3.2.0-29-generic | Nov 8, 2024 | Oct 4, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub