Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs function has counted the pointers, but before the count is copied from user space to kernel space, which leads to a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 4.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-smpUpgrade kernel-sn2Upgrade kernel-s390Upgrade kernel-sourceUpgrade kernel-64k-pagesizeUpgrade kernel-iseries64Upgrade kernel-s390xUpgrade kernel-symsUpgrade kernel-pmac64Upgrade kernel-pseries64Upgrade kernel-debugUpgrade kernel-default | Feb 17, 2015 | Jul 11, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub