The utimensat system call (sys_utimensat) in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIME_NOW and UTIME_OMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade kernel-bigsmpUpgrade kernel-xenpaeUpgrade kernel-xenUpgrade kernel-ppc64Upgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-kdump | Feb 17, 2015 | May 12, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.24-19-itaniumUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.24-19-lpia | Nov 8, 2024 | May 12, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub