fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernelUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-doc | Dec 1, 2016 | Sep 29, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 29, 2008 |
| Suse | — | Upgrade kernel-sourceUpgrade suse-releaseUpgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-xenpaeUpgrade kernel-iseries64Upgrade kernel-xenUpgrade kernel-defaultUpgrade kernel-bigsmpUpgrade kernel-kdump | Feb 17, 2015 | Sep 29, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub