Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.24-21-generic | Nov 8, 2024 | Aug 8, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub