fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-xen-devel | Dec 1, 2016 | Sep 29, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 29, 2008 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-ppc64Upgrade suse-releaseUpgrade kernel-defaultUpgrade kernel-iseries64Upgrade kernel-xenpaeUpgrade kernel-xenUpgrade kernel-kdumpUpgrade kernel-bigsmp | Feb 17, 2015 | Sep 29, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub