The Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segment selector in %cs (the xcs field) during ptrace single-step operations, which allows local users to cause a denial of service (NULL dereference and OOPS) via certain code that makes ptrace PTRACE_SETREGS and PTRACE_SINGLESTEP requests, related to the TRACE_IRQS_ON function, and possibly related to the arch_ptrace function.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 17, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.15-29-sparc64Upgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.15-29-serverUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.15-29-amd64-xeonUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.15-29-hppa32Upgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.15-29-hppa32-smpUpgrade linux-image-2.6.15-29-hppa64-smpUpgrade linux-image-2.6.15-29-hppa64Upgrade linux-image-2.6.15-29-powerpc-smpUpgrade linux-image-2.6.15-29-powerpc64-smpUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.15-29-sparc64-smpUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.15-29-amd64-k8Upgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.15-29-mckinleyUpgrade linux-image-2.6.15-29-386Upgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.15-29-itanium-smpUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.15-29-mckinley-smpUpgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.15-29-amd64-genericUpgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.15-29-k7Upgrade linux-image-2.6.15-29-server-bigironUpgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.15-29-powerpcUpgrade linux-image-2.6.15-29-amd64-serverUpgrade linux-image-2.6.15-29-itaniumUpgrade linux-image-2.6.15-29-686 | Nov 8, 2024 | Sep 17, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub