Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-bigsmpUpgrade um-host-install-initrdUpgrade kernel-defaultUpgrade drbdUpgrade kernel-s390xUpgrade kernel-smpUpgrade um-host-kernelUpgrade kernel-umUpgrade kernel-pseries64Upgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-pmac64Upgrade kernel-sourceUpgrade kernel-sn2Upgrade km_drbdUpgrade kernel-symsUpgrade kernel-s390Upgrade kernel-64k-pagesize | Feb 17, 2015 | Dec 23, 2004 |
| Ubuntu | — | Upgrade linux-image-2.6.8.1-4-powerpc-smpUpgrade linux-image-2.6.8.1-4-k7Upgrade linux-image-2.6.8.1-4-amd64-k8Upgrade linux-image-2.6.8.1-4-686-smpUpgrade linux-image-2.6.8.1-4-386Upgrade linux-image-2.6.8.1-4-k7-smpUpgrade linux-image-2.6.8.1-4-power4 | Nov 8, 2024 | Dec 23, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub