The key serial number collision avoidance code in the key_alloc_serial function in Linux kernel 2.6.9 up to 2.6.20 allows local users to cause a denial of service (crash) via vectors that trigger a null dereference, as originally reported as "spinlock CPU recursion."
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 6, 2007 |
| Suse | — | Upgrade kernel-xenUpgrade kernel-defaultUpgrade kernel-iseries64Upgrade kernel-xenpaeUpgrade kernel-ppc64Upgrade kernel-symsUpgrade suse-releaseUpgrade kernel-bigsmpUpgrade kernel-source | Feb 17, 2015 | Feb 6, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.17-11-sparc64-smpUpgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.17-11-genericUpgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.17-11-powerpcUpgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.17-11-powerpc-smpUpgrade linux-image-2.6.17-11-powerpc64-smpUpgrade linux-image-2.6.17-11-sparc64Upgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.17-11-386Upgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.17-11-server-bigironUpgrade linux-image-2.6.17-11-server | Nov 8, 2024 | Feb 6, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub