Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling O_ASYNC (aka FASYNC or FIOASYNC) on a locked file, and then closing this file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernelUpgrade kernel-develUpgrade kernel-xen-devel | Dec 1, 2016 | Jan 19, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 19, 2010 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-desktop-baseUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-trace-baseUpgrade kernel-symsUpgrade kernel-pae-develUpgrade kernel-paeUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade kernel-vanillaUpgrade kernel-desktopUpgrade kernel-default-develUpgrade kernel-vanilla-develUpgrade kernel-debugUpgrade kernel-pae-baseUpgrade kernel-vanilla-baseUpgrade kernel-desktop-develUpgrade kernel-defaultUpgrade preload-kmp-desktopUpgrade kernel-debug-baseUpgrade kernel-source-vanillaUpgrade preload-kmp-defaultUpgrade kernel-source | Feb 17, 2015 | Jan 19, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.31-211-dove-z0Upgrade linux-image-2.6.31-19-powerpcUpgrade linux-image-2.6.28-18-versatileUpgrade linux-image-2.6.24-27-virtualUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.27-17-serverUpgrade linux-image-2.6.31-19-powerpc64-smpUpgrade linux-image-2.6.31-19-sparc64Upgrade linux-image-2.6.24-27-powerpc64-smpUpgrade linux-image-2.6.24-27-mckinleyUpgrade linux-image-2.6.28-18-lpiaUpgrade linux-image-2.6.24-27-sparc64-smpUpgrade linux-image-2.6.24-27-lpiaUpgrade linux-image-2.6.24-27-xenUpgrade linux-image-2.6.27-17-genericUpgrade linux-image-2.6.31-19-sparc64-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-18-virtualUpgrade linux-image-2.6.31-211-doveUpgrade linux-image-2.6.28-18-serverUpgrade linux-image-2.6.31-19-386Upgrade linux-image-2.6.31-304-ec2Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-108-imx51Upgrade linux-image-2.6.24-27-386Upgrade linux-image-2.6.31-19-generic-paeUpgrade linux-image-2.6.31-19-powerpc-smpUpgrade linux-image-2.6.28-18-imx51Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-27-powerpc-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-27-hppa32Upgrade linux-image-2.6.31-19-ia64Upgrade linux-image-2.6.28-18-genericUpgrade linux-image-2.6.24-27-lpiacompatUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-27-itaniumUpgrade linux-image-2.6.28-18-ixp4xxUpgrade linux-image-2.6.24-27-powerpcUpgrade linux-image-2.6.31-19-virtualUpgrade linux-image-2.6.24-27-openvzUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.31-19-genericUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-27-sparc64Upgrade linux-image-2.6.24-27-serverUpgrade linux-image-2.6.31-19-serverUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.28-18-iop32xUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.31-19-lpiaUpgrade linux-image-2.6.24-27-rtUpgrade linux-image-2.6.24-27-genericUpgrade linux-image-2.6.24-27-hppa64Upgrade linux-image-2.6.27-17-virtualUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-hppa32-smp | Nov 8, 2024 | Jan 19, 2010 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Jan 19, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub