The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain reference count during attempts to use the umount system call in conjunction with a symlink, which allows local users to cause a denial of service (memory consumption or use-after-free) or possibly have unspecified other impact via the umount program.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-docUpgrade python-perfUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade kernel-debug-develUpgrade kernel | Dec 1, 2016 | Aug 1, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 1, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 1, 2014 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-zfcpdump | Dec 9, 2016 | Aug 1, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-35-powerpc64-embUpgrade linux-image-3.13.0-35-powerpc64-smpUpgrade linux-image-3.13.0-35-powerpc-e500mcUpgrade linux-image-3.13.0-35-genericUpgrade linux-image-3.13.0-35-generic-lpaeUpgrade linux-image-3.13.0-35-powerpc-smpUpgrade linux-image-3.13.0-35-powerpc-e500Upgrade linux-image-3.13.0-35-lowlatency | Nov 8, 2024 | Aug 1, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub