The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel | Dec 1, 2016 | Jul 2, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 2, 2008 |
| Suse | — | Upgrade kernel-kdumpUpgrade kernel-paeUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-rtUpgrade kernel-vanilla | Feb 17, 2015 | Jul 2, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.22-15-ume | Nov 8, 2024 | Jul 2, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub