The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service (memory corruption) by selecting a small number of 3-byte UTF-8 characters, which triggers an "off-by-two memory error." NOTE: it is not clear whether this issue crosses privilege boundaries.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kqemu-kmp-debugUpgrade kernel-debugUpgrade pcc-acpi-kmp-debugUpgrade kernel-paeUpgrade wlan-ng-kmp-debugUpgrade acx-kmp-debugUpgrade iscsitarget-kmp-debugUpgrade atl2-kmp-debugUpgrade at76_usb-kmp-debugUpgrade dazuko-kmp-debugUpgrade kernel-xenUpgrade omnibook-kmp-debugUpgrade kernel-kdumpUpgrade nouveau-kmp-debugUpgrade kernel-ps3Upgrade virtualbox-ose-kmp-debugUpgrade vmware-kmp-debugUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-ppc64Upgrade ivtv-kmp-debugUpgrade uvcvideo-kmp-debugUpgrade tpctl-kmp-debugUpgrade drbd-kmp-debugUpgrade pcfclock-kmp-debugUpgrade kernel-docsUpgrade kernel-sourceUpgrade appleir-kmp-debugUpgrade kernel-xenpaeUpgrade acerhk-kmp-debugUpgrade kernel-vanillaUpgrade gspcav-kmp-debugUpgrade aufs-kmp-debug | Feb 17, 2015 | Mar 23, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.24-23-hppa64 | Nov 8, 2024 | Mar 23, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub