The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel panic) via a non group-leader thread executing a different program than was pending in itimer, which causes the signal to be delivered to the old group-leader task, which does not exist.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.8.1-5-amd64-k8-smpUpgrade linux-image-2.6.10-5-itaniumUpgrade linux-image-2.6.8.1-5-powerpcUpgrade linux-image-2.6.10-5-686Upgrade linux-image-2.6.8.1-5-amd64-genericUpgrade linux-image-2.6.10-5-k7-smpUpgrade linux-image-2.6.8.1-5-k7-smpUpgrade linux-image-2.6.10-5-amd64-k8Upgrade linux-image-2.6.8.1-5-power4-smpUpgrade linux-image-2.6.8.1-5-power3Upgrade linux-image-2.6.8.1-5-686-smpUpgrade linux-image-2.6.10-5-k7Upgrade linux-image-2.6.10-5-mckinley-smpUpgrade linux-image-2.6.10-5-itanium-smpUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.8.1-5-amd64-xeonUpgrade linux-image-2.6.10-5-686-smpUpgrade linux-image-2.6.10-5-powerpc | Nov 8, 2024 | Sep 14, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub