The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-largesmp-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-xenUUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-largesmpUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-smpUpgrade kernel-xenU-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-smp-develUpgrade kernel-debug | Dec 1, 2016 | Aug 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 14, 2009 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-symsUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-ppc64Upgrade kernel-ppc64-baseUpgrade iscsitarget-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-defaultUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade kernel-vmi-baseUpgrade oracleasm-kmp-defaultUpgrade ext4dev-kmp-vmiUpgrade ext4dev-kmp-xenUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-kdumpUpgrade ext4dev-kmp-defaultUpgrade kernel-vmi | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.28-15-ixp4xxUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.28-15-iop32xUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.28-15-serverUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.28-15-virtualUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.28-15-imx51Upgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.28-15-genericUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.28-15-lpiaUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.28-15-versatileUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.24-24-mckinley | Nov 8, 2024 | Aug 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 14, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub