The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 12, 2008 |
| Suse | — | Upgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-kdumpUpgrade kernel-bigsmpUpgrade kernel-defaultUpgrade suse-releaseUpgrade kernel-debugUpgrade kernel-ppc64Upgrade kernel-rt_debugUpgrade kernel-iseries64Upgrade kernel-symsUpgrade kernel-xenpae | Feb 17, 2015 | Feb 12, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-14-serverUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.22-14-virtualUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.22-14-sparc64Upgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.22-14-powerpc64-smpUpgrade linux-image-2.6.22-14-mckinleyUpgrade linux-image-2.6.22-14-lpiacompatUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.22-14-itaniumUpgrade linux-image-2.6.22-14-umeUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.22-14-genericUpgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.22-14-cellUpgrade linux-image-2.6.22-14-hppa64Upgrade linux-image-2.6.22-14-powerpcUpgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.22-14-xenUpgrade linux-image-2.6.22-14-hppa32Upgrade linux-image-2.6.22-14-lpiaUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.22-14-rtUpgrade linux-image-2.6.22-14-powerpc-smpUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.22-14-sparc64-smpUpgrade linux-image-2.6.22-14-386 | Nov 8, 2024 | Feb 12, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub