The (1) sys32_mremap function in arch/sparc64/kernel/sys_sparc32.c, the (2) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c, and the (3) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel before 2.6.25.4, omit some virtual-address range (aka span) checks when the mremap MREMAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mremap calls, a related issue to CVE-2008-2137.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.22-16-server | Nov 8, 2024 | Feb 10, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub