The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-bit argument in a 64-bit register was properly sign extended when sent from a user-mode application, but cannot verify this, which allows local users to cause a denial of service (crash) or possibly gain privileges via a crafted system call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-symsUpgrade kernel-traceUpgrade kernel-pae-develUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-xen-develUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-default-develUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-ppc64-baseUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-ppc64-develUpgrade kernel-defaultUpgrade kernel-ppc64 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-server-bigiron | Nov 8, 2024 | Jan 15, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub