The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-default-manUpgrade kernel-trace-baseUpgrade kernel-paeUpgrade kernel-docsUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade kernel-xen-baseUpgrade kernel-ppc64Upgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-ppc64-develUpgrade kernel-traceUpgrade kernel-xen-develUpgrade kernel-symsUpgrade kernel-source | Aug 9, 2024 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub