Linux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled, allows local users to cause a denial of service (crash) via a malformed file stream that triggers a NULL pointer dereference in the superblock_doinit function, as demonstrated using an HFS filesystem image.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-symsUpgrade um-host-kernelUpgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-bigsmpUpgrade kernel-umUpgrade kernel-64k-pagesizeUpgrade kernel-sourceUpgrade kernel-pmac64Upgrade kernel-s390xUpgrade kernel-pseries64Upgrade kernel-smpUpgrade um-host-install-initrdUpgrade kernel-defaultUpgrade kernel-sn2Upgrade kernel-s390 | Feb 17, 2015 | Nov 21, 2006 |
| Ubuntu | — | Upgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.17-11-sparc64Upgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.17-11-genericUpgrade linux-image-2.6.17-11-386Upgrade linux-image-2.6.17-11-sparc64-smpUpgrade linux-image-2.6.17-11-powerpcUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.17-11-server-bigironUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.12-10-386Upgrade linux-image-2.6.17-11-powerpc-smpUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.17-11-serverUpgrade linux-image-2.6.17-11-powerpc64-smpUpgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.15-28-amd64-generic | Nov 8, 2024 | Nov 22, 2006 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub