Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.
CVSS Details
- CVSS 3.1 Base Score: 5.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-bigsmpUpgrade kernel-s390xUpgrade drbdUpgrade kernel-smpUpgrade um-host-install-initrdUpgrade kernel-defaultUpgrade kernel-64k-pagesizeUpgrade kernel-sourceUpgrade um-host-kernelUpgrade kernel-pseries64Upgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-pmac64Upgrade kernel-s390Upgrade kernel-symsUpgrade km_drbdUpgrade kernel-umUpgrade kernel-sn2 | Feb 17, 2015 | Dec 23, 2004 |
| Ubuntu | — | Upgrade linux-image-2.6.8.1-4-686-smpUpgrade linux-image-2.6.8.1-4-k7Upgrade linux-image-2.6.8.1-4-amd64-k8Upgrade linux-image-2.6.8.1-4-powerpc-smpUpgrade linux-image-2.6.8.1-4-386Upgrade linux-image-2.6.8.1-4-k7-smpUpgrade linux-image-2.6.8.1-4-power4 | Nov 8, 2024 | Dec 23, 2004 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub