The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service (incorrect free operations and system crash) via an open system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-abi-whitelistsUpgrade perfUpgrade kernel-firmwareUpgrade kernel-headersUpgrade kernelUpgrade python-perf | Dec 1, 2016 | Jun 23, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 23, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 23, 2014 |
| Suse | — | Upgrade kernel-default | Dec 18, 2015 | Jun 23, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-65-versatileUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-2.6.32-65-genericUpgrade linux-image-2.6.32-65-386Upgrade linux-image-2.6.32-65-virtualUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-2.6.32-369-ec2Upgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-2.6.32-65-preemptUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-2.6.32-65-serverUpgrade linux-image-2.6.32-65-lpia | Nov 8, 2024 | Jun 23, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub