The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-xenU-develUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-docUpgrade kernel-smp-develUpgrade kernel-smpUpgrade kernel-xenUUpgrade kernel-debug-develUpgrade kernel-largesmpUpgrade kernelUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-largesmp-develUpgrade kernel-PAE-devel | Dec 1, 2016 | Aug 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 14, 2009 |
| Suse | — | Upgrade tpctl-kmp-debugUpgrade um-host-kernelUpgrade oracleasm-kmp-debugUpgrade drbd-kmp-traceUpgrade intel-iamt-heci-kmp-debugUpgrade vmware-kmp-traceUpgrade kernel-default-extraUpgrade uvcvideo-kmp-debugUpgrade dazuko-kmp-traceUpgrade wlan-ng-kmp-debugUpgrade kernel-symsUpgrade ib-bonding-kmp-rt_timingUpgrade kernel-defaultUpgrade ofed-kmp-rt_debugUpgrade virtualbox-ose-kmp-traceUpgrade kernel-iseries64Upgrade kernel-pmac64Upgrade kernel-xen-baseUpgrade ofed-kmp-traceUpgrade kernel-ppc64-baseUpgrade ib-bonding-kmp-rt_bigsmpUpgrade kernel-rtUpgrade ivtv-kmp-debugUpgrade kernel-ppc64Upgrade kernel-ppc64-extraUpgrade brocade-bfa-kmp-traceUpgrade um-host-install-initrdUpgrade kernel-debugUpgrade kernel-vanillaUpgrade gspcav-kmp-debugUpgrade kernel-pae-baseUpgrade pcfclock-kmp-traceUpgrade kernel-xenpaeUpgrade ib-bonding-kmp-rtUpgrade kernel-docsUpgrade kernel-default-baseUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade kernel-ec2-extraUpgrade kernel-pae-extraUpgrade kernel-trace-extraUpgrade nouveau-kmp-debugUpgrade kernel-umUpgrade ofed-kmp-debugUpgrade kernel-s390-debugUpgrade kernel-ec2-baseUpgrade ofed-kmp-rt_timingUpgrade aufs-kmp-debugUpgrade appleir-kmp-debugUpgrade kernel-sn2Upgrade kernel-rt_bigsmpUpgrade ofed-kmp-rt_bigsmpUpgrade drbd-kmp-debugUpgrade brocade-bfa-kmp-debugUpgrade kernel-s390Upgrade vmware-kmp-debugUpgrade aufs-kmp-traceUpgrade pcfclock-kmp-debugUpgrade kernel-s390x-debugUpgrade iscsitarget-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade slert-releaseUpgrade ofed-kmp-rtUpgrade kernel-debug-extraUpgrade kernel-trace-baseUpgrade kernel-sourceUpgrade kernel-ps3Upgrade ofed-docUpgrade acx-kmp-debugUpgrade atl2-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade lirc-kmp-traceUpgrade pcc-acpi-kmp-debugUpgrade ofedUpgrade kernel-kdumpUpgrade oracleasm-kmp-traceUpgrade kernel-ec2Upgrade kernel-xenUpgrade kernel-rt_timingUpgrade kernel-pseries64Upgrade kernel-debug-baseUpgrade kernel-paeUpgrade kqemu-kmp-debugUpgrade at76_usb-kmp-debugUpgrade kvm-kmp-traceUpgrade kernel-smpUpgrade virtualbox-ose-kmp-debugUpgrade ib-bonding-kmp-rt_debugUpgrade kernel-rt_debugUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade acerhk-kmp-debugUpgrade kernel-traceUpgrade intel-iamt-heci-kmp-traceUpgrade kernel-64k-pagesizeUpgrade dazuko-kmp-debugUpgrade kernel-bigsmpUpgrade omnibook-kmp-debugUpgrade kqemu-kmp-traceUpgrade kernel-xen-extraUpgrade iscsitarget-kmp-traceUpgrade kernel-s390x | Feb 17, 2015 | Aug 14, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.28-15-lpiaUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.28-15-genericUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.28-15-versatileUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.28-15-imx51Upgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.28-15-serverUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.28-15-virtualUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.28-15-iop32xUpgrade linux-image-2.6.28-15-ixp4xx | Nov 8, 2024 | Aug 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 14, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub