arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-hugememUpgrade kernel-smpUpgrade kernel-xenUUpgrade kernel-hugemem-develUpgrade kernelUpgrade kernel-docUpgrade kernel-xenU-develUpgrade kernel-smp-devel | Dec 1, 2016 | Mar 25, 2008 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-xenUpgrade kernel-kdumpUpgrade kernel-xenpae | Feb 17, 2015 | Mar 25, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub