fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-firmwareUpgrade kernelUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade python-perf | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 22, 2013 |
| Suse | — | Upgrade ocfs2-kmp-traceUpgrade kernel-vanillaUpgrade ocfs2-kmp-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-pae-baseUpgrade kernel-desktopUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade cluster-network-kmp-paeUpgrade drbd-kmp-rt_traceUpgrade cluster-network-kmp-rt_traceUpgrade kernel-trace-develUpgrade iscsitarget-kmp-rt_traceUpgrade iscsitarget-kmp-rtUpgrade kernel-ec2-develUpgrade kernel-ec2-baseUpgrade ocfs2-kmp-ppc64Upgrade kernel-ec2-extraUpgrade kernel-desktop-develUpgrade kernel-ppc64-baseUpgrade kernel-ppc64Upgrade kernel-rt-develUpgrade cluster-network-kmp-ppc64Upgrade kernel-xen-baseUpgrade cluster-network-kmp-defaultUpgrade kernel-desktop-baseUpgrade kernel-pae-develUpgrade xen-kmp-paeUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-default-extraUpgrade kernel-xen-develUpgrade kernel-default-baseUpgrade kernel-pae-extraUpgrade kernel-symsUpgrade kernel-trace-baseUpgrade kernel-rt_trace-develUpgrade ocfs2-kmp-paeUpgrade xen-kmp-traceUpgrade kernel-ppc64-develUpgrade kernel-trace-extraUpgrade kernel-source-rtUpgrade gfs2-kmp-xenUpgrade gfs2-kmp-traceUpgrade kernel-xen-extraUpgrade kernel-debug-develUpgrade gfs2-kmp-ppc64Upgrade gfs2-kmp-paeUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt_trace-baseUpgrade gfs2-kmp-defaultUpgrade xen-kmp-defaultUpgrade kernel-traceUpgrade kernel-develUpgrade kernel-vanilla-develUpgrade kernel-ec2Upgrade ocfs2-kmp-xenUpgrade cluster-network-kmp-rtUpgrade ocfs2-kmp-rt_traceUpgrade kernel-xenUpgrade lttng-modules-kmp-rtUpgrade kernel-rt-baseUpgrade drbd-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt_traceUpgrade kernel-paeUpgrade kernel-debug-baseUpgrade kernel-default-develUpgrade cluster-network-kmp-xenUpgrade cluster-network-kmp-traceUpgrade kernel-rtUpgrade kernel-debugUpgrade sle-hae-releaseUpgrade ofed-kmp-rtUpgrade ofed-kmp-rt_trace | Feb 17, 2015 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-41-generic-paeUpgrade linux-image-3.2.0-41-powerpc64-smpUpgrade linux-image-3.5.0-28-highbankUpgrade linux-image-3.2.0-41-powerpc-smpUpgrade linux-image-3.5.0-28-powerpc-smpUpgrade linux-image-3.2.0-1430-omap4Upgrade linux-image-3.2.0-41-virtualUpgrade linux-image-3.2.0-41-highbankUpgrade linux-image-3.5.0-28-genericUpgrade linux-image-3.5.0-28-omapUpgrade linux-image-3.2.0-41-genericUpgrade linux-image-3.5.0-28-powerpc64-smpUpgrade linux-image-3.5.0-223-omap4Upgrade linux-image-3.2.0-41-omap | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub