arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-docUpgrade kernelUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-xen-devel | Dec 1, 2016 | Nov 5, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 5, 2008 |
| Suse | — | Upgrade kernel-iseries64Upgrade kernel-ppc64Upgrade kernel-kdumpUpgrade kernel-symsUpgrade suse-releaseUpgrade kernel-sourceUpgrade kernel-bigsmpUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-xen | Feb 17, 2015 | Nov 5, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub