The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause a denial of service (system crash) via a certain sequence of file create, remove, and overwrite operations, as demonstrated by the insserv program, related to allocation of "useless pages" and improper maintenance of the i_blocks count.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.24-21-sparc64-smp | Nov 8, 2024 | Aug 8, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub