The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-pseries64Upgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-xenpaeUpgrade kernel-umUpgrade device-mapper-x86Upgrade ltrace-64bitUpgrade lkcdutils-netdump-serverUpgrade kernel-s390Upgrade um-host-install-initrdUpgrade ltrace-32bitUpgrade kernel-kdumpUpgrade sysstatUpgrade kernel-defaultUpgrade kernel-bigsmpUpgrade kernel-s390xUpgrade lkcdutilsUpgrade icecreamUpgrade ltraceUpgrade kernel-ppc64Upgrade kernel-xenUpgrade kernel-smpUpgrade device-mapper-32bitUpgrade um-host-kernelUpgrade device-mapperUpgrade kernel-sourceUpgrade device-mapper-64bitUpgrade kernel-symsUpgrade oprofileUpgrade gfxbootUpgrade kernel-sn2Upgrade kernel-64k-pagesizeUpgrade rsyncUpgrade kernel-pmac64 | Feb 17, 2015 | Jul 5, 2006 |
| Ubuntu | — | Upgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.12-10-386Upgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.12-10-sparc64Upgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.12-10-mckinleyUpgrade linux-image-2.6.12-10-hppa32-smpUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.15-26-powerpcUpgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.15-26-hppa32Upgrade linux-image-2.6.15-26-amd64-serverUpgrade linux-image-2.6.15-26-itanium-smpUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.15-26-serverUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.15-26-amd64-k8Upgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.12-10-hppa64-smpUpgrade linux-image-2.6.10-6-386Upgrade linux-image-2.6.15-26-686Upgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.12-10-sparc64-smpUpgrade linux-image-2.6.12-10-hppa64Upgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.10-6-hppa64-smpUpgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-image-2.6.15-26-amd64-genericUpgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-2.6.10-6-power4Upgrade linux-image-2.6.10-6-power3Upgrade linux-image-2.6.15-26-hppa32-smpUpgrade linux-image-2.6.10-6-hppa32Upgrade linux-image-2.6.10-6-sparc64Upgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.15-26-sparc64-smpUpgrade linux-image-2.6.15-26-hppa64Upgrade linux-image-2.6.15-26-powerpc64-smpUpgrade linux-image-2.6.10-6-hppa64Upgrade linux-image-2.6.10-6-mckinleyUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-source-2.6.15Upgrade linux-image-2.6.15-26-server-bigironUpgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.10-6-sparc64-smpUpgrade linux-image-2.6.15-26-mckinleyUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.15-26-386Upgrade linux-image-2.6.15-26-mckinley-smpUpgrade linux-image-2.6.12-10-mckinley-smpUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.15-26-amd64-xeonUpgrade linux-image-2.6.10-6-itaniumUpgrade linux-image-2.6.15-26-powerpc-smpUpgrade linux-image-2.6.15-26-hppa64-smpUpgrade linux-image-2.6.15-26-itaniumUpgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.15-26-sparc64Upgrade linux-image-2.6.15-26-k7Upgrade linux-image-2.6.12-10-itanium-smpUpgrade linux-image-2.6.10-6-hppa32-smpUpgrade linux-image-2.6.12-10-hppa32Upgrade linux-image-2.6.12-10-686-smp | Nov 8, 2024 | Jul 5, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub