fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-commonUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-PAE-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-xen-devel | Dec 1, 2016 | Jan 26, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 26, 2009 |
| Suse | — | Upgrade ofed-kmp-rt_bigsmpUpgrade nouveau-kmp-debugUpgrade ofedUpgrade drbd-kmp-debugUpgrade ofed-kmp-rt_timingUpgrade kernel-docsUpgrade ib-bonding-kmp-rtUpgrade kernel-bigsmpUpgrade gspcav-kmp-debugUpgrade kernel-rt_timingUpgrade kernel-xen-baseUpgrade kernel-trace-extraUpgrade kernel-ppc64-baseUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade pcc-acpi-kmp-debugUpgrade vmware-kmp-debugUpgrade iscsitarget-kmp-debugUpgrade at76_usb-kmp-debugUpgrade virtualbox-ose-kmp-debugUpgrade kernel-debug-extraUpgrade omnibook-kmp-debugUpgrade appleir-kmp-debugUpgrade kernel-rt_bigsmpUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-rt_debugUpgrade atl2-kmp-debugUpgrade kernel-kdumpUpgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade kernel-debugUpgrade ofed-kmp-rtUpgrade kernel-default-baseUpgrade kernel-paeUpgrade ib-bonding-kmp-rt_debugUpgrade kernel-trace-baseUpgrade pcfclock-kmp-debugUpgrade kernel-xen-extraUpgrade kernel-sourceUpgrade dazuko-kmp-debugUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-pae-extraUpgrade ib-bonding-kmp-rt_timingUpgrade ib-bonding-kmp-rt_bigsmpUpgrade kernel-default-extraUpgrade acerhk-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade kernel-rtUpgrade ivtv-kmp-debugUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kernel-ppc64-extraUpgrade aufs-kmp-debugUpgrade acx-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade ofed-docUpgrade kernel-traceUpgrade slert-releaseUpgrade kernel-vanillaUpgrade ofed-kmp-rt_debugUpgrade wlan-ng-kmp-debugUpgrade kqemu-kmp-debugUpgrade uvcvideo-kmp-debugUpgrade tpctl-kmp-debugUpgrade kernel-debug-baseUpgrade kernel-ps3 | Feb 17, 2015 | Jan 26, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.22-16-rt | Nov 8, 2024 | Jan 26, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Jan 26, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub