The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-debug-devel | Dec 1, 2016 | Oct 13, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Oct 13, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-25-sparc64-smp | Nov 8, 2024 | Oct 13, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Oct 13, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub