The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-docUpgrade kernel-debug-devel | Dec 1, 2016 | Dec 17, 2007 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 18, 2007 |
| Suse | — | Upgrade kernel-xenpaeUpgrade kernel-iseries64Upgrade kernel-debugUpgrade kernel-xenUpgrade kernel-rt_debugUpgrade kernel-bigsmpUpgrade kernel-kdumpUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-defaultUpgrade suse-release | Feb 17, 2015 | Dec 17, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.15-51-amd64-serverUpgrade linux-image-2.6.15-51-sparc64Upgrade linux-image-2.6.22-14-rtUpgrade linux-image-2.6.15-51-k7Upgrade linux-image-2.6.15-51-mckinley-smpUpgrade linux-image-2.6.15-51-mckinleyUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.22-14-powerpc64-smpUpgrade linux-image-2.6.15-51-hppa64Upgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.15-51-amd64-k8Upgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.15-51-powerpcUpgrade linux-image-2.6.22-14-itaniumUpgrade linux-image-2.6.22-14-lpiacompatUpgrade linux-image-2.6.15-51-serverUpgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.15-51-itanium-smpUpgrade linux-image-2.6.15-51-powerpc-smpUpgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.22-14-cellUpgrade linux-image-2.6.15-51-hppa32Upgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.22-14-umeUpgrade linux-image-2.6.22-14-sparc64-smpUpgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.22-14-serverUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.15-51-hppa32-smpUpgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.15-51-amd64-genericUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.22-14-powerpc-smpUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.15-51-hppa64-smpUpgrade linux-image-2.6.15-51-itaniumUpgrade linux-image-2.6.22-14-xenUpgrade linux-image-2.6.15-51-powerpc64-smpUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.22-14-powerpcUpgrade linux-image-2.6.22-14-hppa32Upgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.15-51-server-bigironUpgrade linux-image-2.6.15-51-386Upgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.22-14-lpiaUpgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.22-14-virtualUpgrade linux-image-2.6.22-14-genericUpgrade linux-image-2.6.22-14-mckinleyUpgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.22-14-sparc64Upgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.22-14-386Upgrade linux-image-2.6.15-51-sparc64-smpUpgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.15-51-amd64-xeonUpgrade linux-image-2.6.15-51-686Upgrade linux-image-2.6.22-14-hppa64 | Nov 8, 2024 | Dec 18, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub