mm/shmem.c in the Linux kernel before 2.6.28-rc8, when strict overcommit is enabled and CONFIG_SECURITY is disabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1643.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.32-24-serverUpgrade linux-image-2.6.32-308-ec2Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.32-24-versatileUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.32-24-386Upgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.32-24-ia64Upgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.32-207-doveUpgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.33-502-omapUpgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.15-55-mckinley-smp | Nov 8, 2024 | Jun 3, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub