libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-xen-debuginfoUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-largesmp-develUpgrade kernel-debuginfoUpgrade kernel-smpUpgrade kernel-debug-develUpgrade kernel-largesmpUpgrade kernelUpgrade kernel-smp-develUpgrade kernel-PAE-debuginfoUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-xenUUpgrade kernel-debuginfo-commonUpgrade kernel-xenUpgrade kernel-debug-debuginfoUpgrade kernel-xen-develUpgrade kernel-xenU-devel | Dec 1, 2016 | Dec 22, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 22, 2008 |
| Suse | — | Upgrade kernel-debug-extraUpgrade kernel-kdumpUpgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-trace-baseUpgrade kernel-pae-extraUpgrade kernel-ppc64-baseUpgrade kernel-docsUpgrade kernel-ps3Upgrade kernel-ppc64Upgrade kernel-default-baseUpgrade kernel-sourceUpgrade kernel-trace-extraUpgrade kernel-rt_debugUpgrade kernel-debug-baseUpgrade kernel-debugUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-ppc64-extraUpgrade kernel-vanillaUpgrade kernel-traceUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-default-extraUpgrade kernel-xen-extra | Feb 17, 2015 | Dec 22, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.15-53-sparc64Upgrade linux-image-2.6.15-53-server-bigironUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.15-53-686Upgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.15-53-powerpc64-smpUpgrade linux-image-2.6.15-53-powerpc-smpUpgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.15-53-amd64-k8Upgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.15-53-amd64-genericUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.15-53-k7Upgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.15-53-mckinleyUpgrade linux-image-2.6.15-53-hppa32Upgrade linux-image-2.6.15-53-hppa32-smpUpgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.15-53-hppa64-smpUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.15-53-powerpcUpgrade linux-image-2.6.15-53-serverUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.15-53-sparc64-smpUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.15-53-amd64-xeonUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.15-53-hppa64Upgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.15-53-itaniumUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.15-53-itanium-smpUpgrade linux-image-2.6.15-53-mckinley-smpUpgrade linux-image-2.6.15-53-386Upgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.15-53-amd64-serverUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.22-16-itanium | Nov 8, 2024 | Dec 22, 2008 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Dec 22, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub