The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade python-perfUpgrade kernelUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade kernel-xen-develUpgrade perfUpgrade kernel-firmwareUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-debug-devel | Dec 1, 2016 | Mar 16, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 16, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 8, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 16, 2015 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-devel | Dec 18, 2015 | Mar 16, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-48-powerpc64-embUpgrade linux-image-3.2.0-79-powerpc-smpUpgrade linux-image-3.2.0-79-omapUpgrade linux-image-3.2.0-79-genericUpgrade linux-image-3.2.0-79-virtualUpgrade linux-image-3.13.0-48-powerpc64-smpUpgrade linux-image-3.2.0-79-powerpc64-smpUpgrade linux-image-3.13.0-48-generic-lpaeUpgrade linux-image-3.13.0-48-powerpc-smpUpgrade linux-image-3.13.0-48-lowlatencyUpgrade linux-image-3.2.0-79-highbankUpgrade linux-image-3.2.0-1461-omap4Upgrade linux-image-3.2.0-79-generic-paeUpgrade linux-image-3.13.0-48-genericUpgrade linux-image-3.13.0-48-powerpc-e500Upgrade linux-image-3.13.0-48-powerpc-e500mc | Nov 8, 2024 | Mar 16, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub