The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-trace-develUpgrade kernel-trace-baseUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade kernel-ppc64Upgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-ppc64-develUpgrade kernel-xen-develUpgrade kernel-symsUpgrade kernel-traceUpgrade kernel-xen-baseUpgrade kernel-paeUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-xen | Aug 9, 2024 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub