mm/shmem.c in the Linux kernel before 2.6.28-rc8, when strict overcommit is enabled and CONFIG_SECURITY is disabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1643.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.32-24-ia64Upgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.32-207-doveUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.33-502-omapUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-24-versatileUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.32-308-ec2Upgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.32-24-386Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.32-24-serverUpgrade linux-image-2.6.15-55-itanium | Nov 8, 2024 | Jun 3, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub