Linux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled, allows local users to cause a denial of service (crash) via a malformed file stream that triggers a NULL pointer dereference in the superblock_doinit function, as demonstrated using an HFS filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade um-host-kernelUpgrade kernel-bigsmpUpgrade kernel-s390xUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-umUpgrade kernel-pmac64Upgrade kernel-64k-pagesizeUpgrade kernel-symsUpgrade kernel-iseries64Upgrade kernel-pseries64Upgrade kernel-s390Upgrade um-host-install-initrdUpgrade kernel-smpUpgrade kernel-sn2Upgrade kernel-default | Feb 17, 2015 | Nov 21, 2006 |
| Ubuntu | — | Upgrade linux-image-2.6.17-11-genericUpgrade linux-image-2.6.17-11-sparc64-smpUpgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.17-11-powerpcUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.12-10-386Upgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.17-11-server-bigironUpgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.17-11-sparc64Upgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.17-11-386Upgrade linux-image-2.6.17-11-powerpc-smpUpgrade linux-image-2.6.17-11-powerpc64-smpUpgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.17-11-serverUpgrade linux-image-2.6.15-28-386 | Nov 8, 2024 | Nov 22, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub