Use-after-free vulnerability in the shmem_remount_fs function in mm/shmem.c in the Linux kernel before 3.7.10 allows local users to gain privileges or cause a denial of service (system crash) by remounting a tmpfs filesystem without specifying a required mpol (aka mempolicy) mount option.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-docUpgrade kernel-firmwareUpgrade kernel-develUpgrade kernel-debugUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debug-devel | Dec 1, 2016 | Feb 28, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Feb 28, 2013 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-default-devel-debuginfoUpgrade ext4dev-kmp-traceUpgrade ocfs2-kmp-rtUpgrade kernel-pae-debuginfoUpgrade ocfs2-kmp-rt_traceUpgrade kernel-vanillaUpgrade kernel-vanilla-base-debuginfoUpgrade ocfs2-kmp-xenUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-pae-base-debuginfoUpgrade kernel-ec2-debuginfoUpgrade ocfs2-kmp-traceUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-trace-debuginfoUpgrade kernel-ec2Upgrade kernel-desktopUpgrade kernel-symsUpgrade kernel-defaultUpgrade btrfs-kmp-defaultUpgrade kernel-desktop-baseUpgrade kernel-trace-baseUpgrade kernel-debug-develUpgrade kernel-ec2-extraUpgrade kernel-debug-debugsourceUpgrade btrfs-kmp-xenUpgrade kernel-desktop-develUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-pae-baseUpgrade kernel-debug-base-debuginfoUpgrade kernel-xen-base-debuginfoUpgrade ext4dev-kmp-paeUpgrade kernel-trace-develUpgrade kernel-debugUpgrade kernel-trace-base-debuginfoUpgrade ocfs2-kmp-ppc64Upgrade kernel-ppc64-baseUpgrade kernel-pae-devel-debuginfoUpgrade kernel-xen-devel-debuginfoUpgrade cluster-network-kmp-rt_traceUpgrade hyper-v-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-default-manUpgrade ocfs2-kmp-paeUpgrade kernel-rt_trace-develUpgrade cluster-network-kmp-paeUpgrade kernel-default-baseUpgrade kernel-vanilla-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-desktop-base-debuginfoUpgrade kernel-syms-rtUpgrade kernel-pae-develUpgrade gfs2-kmp-ppc64Upgrade xen-kmp-paeUpgrade xen-kmp-traceUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-desktop-debugsourceUpgrade cluster-network-kmp-ppc64Upgrade hyper-v-kmp-paeUpgrade kernel-default-debugsourceUpgrade kernel-rt-baseUpgrade ofed-kmp-rt_traceUpgrade kernel-xen-debuginfoUpgrade kernel-vanilla-devel-debuginfoUpgrade sle-hae-releaseUpgrade ext4dev-kmp-xenUpgrade kernel-vanilla-develUpgrade kernel-rt-develUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-ec2-base-debuginfoUpgrade kernel-traceUpgrade kernel-ec2-debugsourceUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt_traceUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-source-rtUpgrade btrfs-kmp-paeUpgrade gfs2-kmp-paeUpgrade iscsitarget-kmp-rtUpgrade kernel-default-develUpgrade kernel-ppc64-develUpgrade kernel-xenUpgrade kernel-trace-extraUpgrade cluster-network-kmp-rtUpgrade kernel-xen-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-vanilla-baseUpgrade kernel-xen-baseUpgrade cluster-network-kmp-traceUpgrade kernel-pae-debugsourceUpgrade kernel-source-vanillaUpgrade xen-kmp-defaultUpgrade kernel-trace-debugsourceUpgrade lttng-modules-kmp-rtUpgrade kernel-trace-devel-debuginfoUpgrade ext4dev-kmp-defaultUpgrade kernel-xen-extraUpgrade kernel-ppc64Upgrade kernel-xen-debugsourceUpgrade kernel-pae-extraUpgrade kernel-sourceUpgrade kernel-desktop-debuginfoUpgrade kernel-rt_trace-baseUpgrade kernel-rtUpgrade kernel-default-base-debuginfoUpgrade ofed-kmp-rtUpgrade kernel-paeUpgrade kernel-vanilla-debugsourceUpgrade drbd-kmp-rt_traceUpgrade ocfs2-kmp-defaultUpgrade drbd-kmp-rtUpgrade hyper-v-kmp-traceUpgrade gfs2-kmp-xenUpgrade gfs2-kmp-traceUpgrade kernel-debug-devel-debuginfoUpgrade kernel-ec2-baseUpgrade kernel-default-debuginfoUpgrade cluster-network-kmp-xenUpgrade kernel-debug-base | Feb 17, 2015 | Feb 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-40-powerpc64-smpUpgrade linux-image-3.2.0-40-highbankUpgrade linux-image-3.2.0-40-generic-paeUpgrade linux-image-3.5.0-27-omapUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-3.5.0-27-powerpc-smpUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-2.6.32-46-serverUpgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-3.5.0-27-genericUpgrade linux-image-3.2.0-40-powerpc-smpUpgrade linux-image-3.2.0-40-omapUpgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-3.2.0-40-genericUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-3.5.0-222-omap4Upgrade linux-image-3.0.0-32-powerpcUpgrade linux-image-3.0.0-32-powerpc64-smpUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-2.6.32-46-preemptUpgrade linux-image-3.2.0-40-virtualUpgrade linux-image-3.2.0-1429-omap4Upgrade linux-image-3.0.0-32-omapUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-2.6.32-46-genericUpgrade linux-image-3.0.0-32-virtualUpgrade linux-image-3.5.0-27-highbankUpgrade linux-image-2.6.32-46-386Upgrade linux-image-3.0.0-32-powerpc-smpUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-3.0.0-32-serverUpgrade linux-image-3.5.0-27-powerpc64-smpUpgrade linux-image-3.0.0-32-genericUpgrade linux-image-3.0.0-32-generic-pae | Nov 8, 2024 | Feb 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub