The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-symsUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade kernel-docsUpgrade kernel-xen-develUpgrade kernel-ppc64-baseUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade kernel-default-manUpgrade kernel-traceUpgrade kernel-ppc64Upgrade kernel-xenUpgrade kernel-paeUpgrade kernel-sourceUpgrade kernel-ppc64-develUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-default | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-18-rtUpgrade linux-image-2.6.24-18-mckinleyUpgrade linux-image-2.6.24-18-powerpc-smpUpgrade linux-image-2.6.24-18-powerpc64-smpUpgrade linux-image-2.6.24-18-sparc64-smpUpgrade linux-image-2.6.24-18-hppa32Upgrade linux-image-2.6.24-18-itaniumUpgrade linux-image-2.6.24-18-openvzUpgrade linux-image-2.6.24-18-lpiaUpgrade linux-image-2.6.24-18-genericUpgrade linux-image-2.6.24-18-powerpcUpgrade linux-image-2.6.24-18-386Upgrade linux-image-2.6.24-18-virtualUpgrade linux-image-2.6.24-18-hppa64Upgrade linux-image-2.6.24-18-serverUpgrade linux-image-2.6.24-18-sparc64Upgrade linux-image-2.6.24-18-lpiacompatUpgrade linux-image-2.6.24-18-xen | Nov 8, 2024 | May 2, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub