The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-abi-whitelistsUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade kernel-xenUpgrade kernel-tools | Dec 1, 2016 | Mar 16, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 16, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 16, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 11, 2015 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2 | Dec 18, 2015 | Mar 16, 2015 |
| Ubuntu | — | Upgrade linux-image-2.6.32-73-genericUpgrade linux-image-3.2.0-1462-omap4Upgrade linux-image-2.6.32-73-ia64Upgrade linux-image-2.6.32-73-sparc64-smpUpgrade linux-image-2.6.32-73-versatileUpgrade linux-image-2.6.32-73-powerpcUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-2.6.32-73-generic-paeUpgrade linux-image-2.6.32-73-powerpc64-smpUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-3.2.0-77-virtualUpgrade linux-image-3.2.0-77-genericUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.2.0-77-powerpc64-smpUpgrade linux-image-2.6.32-73-sparc64Upgrade linux-image-3.2.0-77-highbankUpgrade linux-image-2.6.32-73-preemptUpgrade linux-image-3.2.0-77-powerpc-smpUpgrade linux-image-2.6.32-73-serverUpgrade linux-image-2.6.32-73-386Upgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-2.6.32-73-virtualUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.2.0-77-generic-paeUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-2.6.32-73-lpiaUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.2.0-77-omapUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-2.6.32-73-powerpc-smpUpgrade linux-image-3.13.0-46-powerpc64-smp | Nov 8, 2024 | Mar 16, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub