Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (kmalloc'd memory corruption) via a remote NDIS response to OID_GEN_SUPPORTED_LIST, which causes memory to be allocated for the reply data but not the reply structure.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.10-6-power3-smpUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-image-2.6.12-10-itanium-smpUpgrade linux-image-2.6.12-10-hppa64Upgrade linux-image-2.6.12-10-mckinley-smpUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-patch-ubuntu-2.6.12 | Nov 8, 2024 | Mar 23, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub