The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-largesmpUpgrade kernel-xenUUpgrade kernel-PAE-develUpgrade kernel-largesmp-develUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-xenU-develUpgrade kernel-smpUpgrade kernel-smp-develUpgrade kernel-doc | Dec 1, 2016 | Aug 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 14, 2009 |
| Suse | — | Upgrade ib-bonding-kmp-rt_debugUpgrade kernel-s390xUpgrade kernel-ec2Upgrade acerhk-kmp-debugUpgrade kqemu-kmp-debugUpgrade intel-iamt-heci-kmp-traceUpgrade kernel-bigsmpUpgrade kernel-traceUpgrade kernel-xen-extraUpgrade kernel-ps3Upgrade ofed-docUpgrade kernel-trace-baseUpgrade kernel-pseries64Upgrade kernel-debug-baseUpgrade kernel-xenUpgrade kernel-sourceUpgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade omnibook-kmp-debugUpgrade oracleasm-kmp-traceUpgrade iscsitarget-kmp-debugUpgrade dazuko-kmp-debugUpgrade kernel-rt_debugUpgrade kqemu-kmp-traceUpgrade atl2-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade kernel-rt_timingUpgrade ofedUpgrade pcc-acpi-kmp-debugUpgrade lirc-kmp-traceUpgrade kernel-kdumpUpgrade kernel-debug-extraUpgrade slert-releaseUpgrade kernel-paeUpgrade acx-kmp-debugUpgrade kernel-s390x-debugUpgrade kernel-64k-pagesizeUpgrade virtualbox-ose-kmp-debugUpgrade iscsitarget-kmp-traceUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade ofed-kmp-rtUpgrade kernel-smpUpgrade at76_usb-kmp-debugUpgrade kvm-kmp-traceUpgrade ib-bonding-kmp-rt_bigsmpUpgrade ofed-kmp-rt_debugUpgrade wlan-ng-kmp-debugUpgrade kernel-pae-extraUpgrade kernel-xenpaeUpgrade ofed-kmp-rt_bigsmpUpgrade kernel-debugUpgrade oracleasm-kmp-debugUpgrade kernel-s390-debugUpgrade kernel-umUpgrade brocade-bfa-kmp-debugUpgrade vmware-kmp-debugUpgrade kernel-ppc64-extraUpgrade kernel-s390Upgrade kernel-sn2Upgrade kernel-rtUpgrade kernel-default-extraUpgrade tpctl-kmp-debugUpgrade kernel-ec2-extraUpgrade drbd-kmp-debugUpgrade kernel-docsUpgrade ib-bonding-kmp-rtUpgrade pcfclock-kmp-debugUpgrade ivtv-kmp-debugUpgrade kernel-default-baseUpgrade nouveau-kmp-debugUpgrade kernel-vanillaUpgrade pcfclock-kmp-traceUpgrade kernel-ppc64-baseUpgrade intel-iamt-heci-kmp-debugUpgrade gspcav-kmp-debugUpgrade drbd-kmp-traceUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-pae-baseUpgrade ofed-kmp-debugUpgrade kernel-trace-extraUpgrade aufs-kmp-debugUpgrade dazuko-kmp-traceUpgrade kernel-rt_bigsmpUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade ofed-kmp-rt_timingUpgrade kernel-ec2-baseUpgrade kernel-iseries64Upgrade brocade-bfa-kmp-traceUpgrade uvcvideo-kmp-debugUpgrade um-host-kernelUpgrade appleir-kmp-debugUpgrade kernel-xen-baseUpgrade kernel-pmac64Upgrade vmware-kmp-traceUpgrade virtualbox-ose-kmp-traceUpgrade ofed-kmp-traceUpgrade aufs-kmp-traceUpgrade kernel-ppc64Upgrade ib-bonding-kmp-rt_timingUpgrade um-host-install-initrd | Feb 17, 2015 | Aug 14, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.28-15-virtualUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.28-15-ixp4xxUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.28-15-iop32xUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.28-15-serverUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.28-15-versatileUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.28-15-lpiaUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.28-15-imx51Upgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.28-15-genericUpgrade linux-image-2.6.24-24-powerpc64-smp | Nov 8, 2024 | Aug 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 14, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub