Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-smpUpgrade kernel-develUpgrade kernel-hugememUpgrade kernel-hugemem-develUpgrade kernelUpgrade kernel-xenUUpgrade kernel-xen-develUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-smp-develUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-xenU-devel | Dec 1, 2016 | Jan 13, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 13, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.22-16-itanium | Nov 8, 2024 | Jan 13, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Jan 13, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub