Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc_file_read and locks_read_proc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-sourceUpgrade kernel-debugUpgrade um-host-kernelUpgrade kernel-iseries64Upgrade kernel-64k-pagesizeUpgrade kernel-umUpgrade kernel-pseries64Upgrade kernel-s390Upgrade km_drbdUpgrade kernel-symsUpgrade kernel-pmac64Upgrade kernel-bigsmpUpgrade um-host-install-initrdUpgrade kernel-defaultUpgrade kernel-sn2Upgrade drbdUpgrade kernel-s390xUpgrade kernel-smp | Feb 17, 2015 | May 2, 2005 |
| Ubuntu | — | Upgrade linux-image-2.6.8.1-5-power3Upgrade linux-image-2.6.8.1-5-power4-smpUpgrade linux-image-2.6.8.1-5-686-smpUpgrade linux-image-2.6.8.1-5-amd64-xeonUpgrade linux-image-2.6.8.1-5-amd64-genericUpgrade linux-image-2.6.8.1-5-k7-smpUpgrade linux-image-2.6.8.1-5-amd64-k8Upgrade linux-image-2.6.8.1-5-amd64-k8-smp | Nov 8, 2024 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub