The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and causes an out-of-bounds read in the readb function.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-25-lpiacompat | Nov 8, 2024 | Aug 18, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub