The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-64k-pagesizeUpgrade device-mapperUpgrade ltraceUpgrade gfxbootUpgrade kernel-sn2Upgrade kernel-symsUpgrade kernel-sourceUpgrade rsyncUpgrade icecreamUpgrade device-mapper-32bitUpgrade oprofileUpgrade kernel-pmac64Upgrade kernel-smpUpgrade um-host-kernelUpgrade device-mapper-64bitUpgrade kernel-xenUpgrade kernel-ppc64Upgrade ltrace-64bitUpgrade kernel-umUpgrade lkcdutils-netdump-serverUpgrade um-host-install-initrdUpgrade sysstatUpgrade kernel-bigsmpUpgrade kernel-s390Upgrade kernel-pseries64Upgrade kernel-s390xUpgrade ltrace-32bitUpgrade kernel-kdumpUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-xenpaeUpgrade lkcdutilsUpgrade device-mapper-x86Upgrade kernel-iseries64 | Feb 17, 2015 | Jul 5, 2006 |
| Ubuntu | — | Upgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-image-2.6.15-26-amd64-k8Upgrade linux-image-2.6.12-10-hppa32-smpUpgrade linux-image-2.6.12-10-sparc64-smpUpgrade linux-image-2.6.12-10-386Upgrade linux-image-2.6.15-26-amd64-genericUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.10-6-hppa64-smpUpgrade linux-image-2.6.15-26-powerpcUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.15-26-amd64-serverUpgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.12-10-sparc64Upgrade linux-image-2.6.10-6-power3Upgrade linux-image-2.6.15-26-686Upgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.15-26-serverUpgrade linux-image-2.6.10-6-386Upgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.12-10-hppa64Upgrade linux-image-2.6.12-10-hppa64-smpUpgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.10-6-power4Upgrade linux-image-2.6.12-10-mckinleyUpgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.15-26-hppa32Upgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.15-26-itanium-smpUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.12-10-mckinley-smpUpgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-image-2.6.10-6-sparc64-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.15-26-mckinleyUpgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.15-26-sparc64-smpUpgrade linux-source-2.6.15Upgrade linux-image-2.6.15-26-powerpc64-smpUpgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-image-2.6.15-26-hppa64Upgrade linux-image-2.6.15-26-amd64-xeonUpgrade linux-image-2.6.15-26-sparc64Upgrade linux-image-2.6.10-6-itaniumUpgrade linux-image-2.6.15-26-powerpc-smpUpgrade linux-image-2.6.10-6-hppa32-smpUpgrade linux-image-2.6.10-6-sparc64Upgrade linux-image-2.6.10-6-hppa64Upgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.12-10-hppa32Upgrade linux-image-2.6.15-26-mckinley-smpUpgrade linux-image-2.6.15-26-k7Upgrade linux-image-2.6.12-10-itanium-smpUpgrade linux-image-2.6.15-26-server-bigironUpgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.15-26-hppa64-smpUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.15-26-hppa32-smpUpgrade linux-image-2.6.10-6-mckinleyUpgrade linux-image-2.6.15-26-itaniumUpgrade linux-image-2.6.15-26-386Upgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.10-6-hppa32 | Nov 8, 2024 | Jul 5, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub