The fill_write_buffer function in sysfs/file.c in Linux kernel 2.6.12 up to versions before 2.6.17-rc1 does not zero terminate a buffer when a length of PAGE_SIZE or more is requested, which might allow local users to cause a denial of service (crash) by causing an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-powerpc-smpUpgrade xorg-driver-fglrxUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-serverUpgrade linux-restricted-modules-2.6.15-25-powerpcUpgrade linux-power3Upgrade linux-restricted-modules-2.6.15-25-386Upgrade linux-amd64-xeonUpgrade linux-restricted-modules-2.6.15-25-k7Upgrade linux-k7-smpUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-powerpcUpgrade linux-restricted-modules-2.6.15-25-amd64-xeonUpgrade linux-power4-smpUpgrade linux-image-2.6.15-25-powerpc64-smpUpgrade linux-image-2.6.15-25-686Upgrade linux-image-power3Upgrade linux-image-2.6.15-25-k7Upgrade linux-386Upgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-amd64-xeonUpgrade linux-k7Upgrade linux-image-power3-smpUpgrade avm-fritz-firmwareUpgrade linux-image-2.6.10-6-k7Upgrade linux-image-power4Upgrade linux-image-power4-smpUpgrade linux-image-2.6.15-25-amd64-xeonUpgrade nvidia-glx-devUpgrade linux-tree-2.6.12Upgrade linux-image-2.6.15-25-serverUpgrade linux-image-amd64-k8Upgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-restricted-modules-k7Upgrade linux-restricted-modules-amd64-genericUpgrade linux-image-386Upgrade fglrx-kernel-sourceUpgrade linux-image-2.6.12-10-386Upgrade linux-amd64-k8Upgrade linux-restricted-modules-386Upgrade linux-image-2.6.10-6-power4Upgrade linux-source-2.6.10Upgrade linux-image-amd64-genericUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-restricted-modules-commonUpgrade linux-restricted-modules-686Upgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-amd64-serverUpgrade linux-image-2.6.10-6-amd64-k8Upgrade nvidia-glx-legacyUpgrade linux-image-2.6.10-6-686-smpUpgrade linux-restricted-modules-powerpc-smpUpgrade linux-image-2.6.10-6-powerpcUpgrade avm-fritz-firmware-2.6.15-25Upgrade linux-image-2.6.15-25-amd64-k8Upgrade linux-restricted-modules-2.6.15-25-amd64-k8Upgrade linux-amd64-genericUpgrade xorg-driver-fglrx-devUpgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-686Upgrade linux-image-2.6.15-25-powerpc-smpUpgrade linux-image-powerpc-smpUpgrade linux-restricted-modules-amd64-xeonUpgrade linux-image-server-bigironUpgrade linux-restricted-modules-2.6.15-25-686Upgrade linux-source-2.6.15Upgrade linux-686Upgrade linux-image-2.6.15-25-powerpcUpgrade linux-server-bigironUpgrade linux-tree-2.6.10Upgrade linux-amd64-serverUpgrade linux-source-2.6.12Upgrade linux-image-2.6.10-6-power3Upgrade nvidia-glx-legacy-devUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade nvidia-glxUpgrade linux-amd64-k8-smpUpgrade linux-image-2.6.15-25-server-bigironUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.10-6-386Upgrade linux-image-2.6.12-10-k7-smp | Nov 8, 2024 | Apr 5, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub