The utimensat system call (sys_utimensat) in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIME_NOW and UTIME_OMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-symsUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-kdumpUpgrade kernel-ppc64Upgrade kernel-bigsmpUpgrade kernel-defaultUpgrade kernel-xenUpgrade kernel-xenpae | Feb 17, 2015 | May 12, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.24-19-itaniumUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.22-15-lpiacompat | Nov 8, 2024 | May 12, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub