The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-largesmpUpgrade kernel-debug-develUpgrade kernel-xenUUpgrade kernel-headersUpgrade kernel-largesmp-develUpgrade kernel-xenU-develUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-smp-develUpgrade kernel-smpUpgrade kernel-develUpgrade kernel-debug | Dec 1, 2016 | Aug 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 14, 2009 |
| Suse | — | Upgrade kernel-xen-baseUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-vmi-baseUpgrade oracleasm-kmp-defaultUpgrade ext4dev-kmp-ppc64Upgrade ext4dev-kmp-paeUpgrade kernel-symsUpgrade iscsitarget-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-ppc64-baseUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-vmiUpgrade ext4dev-kmp-defaultUpgrade kernel-vmiUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-kdumpUpgrade kernel-pae | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.28-15-virtualUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.28-15-serverUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.28-15-ixp4xxUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.28-15-iop32xUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.28-15-lpiaUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.28-15-versatileUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.28-15-imx51Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.28-15-generic | Nov 8, 2024 | Aug 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 14, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 14, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub