The (1) sys32_mremap function in arch/sparc64/kernel/sys_sparc32.c, the (2) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c, and the (3) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel before 2.6.25.4, omit some virtual-address range (aka span) checks when the mremap MREMAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mremap calls, a related issue to CVE-2008-2137.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-hppa32 | Nov 8, 2024 | Feb 10, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub