The utimensat system call (sys_utimensat) in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIME_NOW and UTIME_OMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-kdumpUpgrade kernel-ppc64Upgrade kernel-debugUpgrade kernel-bigsmpUpgrade kernel-xenpaeUpgrade kernel-xenUpgrade kernel-default | Feb 17, 2015 | May 12, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.24-19-itaniumUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.22-15-generic | Nov 8, 2024 | May 12, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub