The aio_setup_ring function in Linux kernel does not properly initialize a variable, which allows local users to cause a denial of service (crash) via an unspecified error path that causes an incorrect free operation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-64k-pagesizeUpgrade kernel-sn2Upgrade kernel-s390Upgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-pmac64Upgrade kernel-smpUpgrade kernel-debugUpgrade kernel-umUpgrade um-host-kernelUpgrade kernel-iseries64Upgrade um-host-install-initrdUpgrade kernel-s390xUpgrade kernel-pseries64Upgrade kernel-bigsmp | Feb 17, 2015 | Jan 30, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub