The gfs2_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs_lock function in the Linux kernel on Red Hat Enterprise Linux (RHEL) 5 and 6, does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a denial of service (BUG and system crash) by locking a file on a (1) GFS or (2) GFS2 filesystem, and then changing this file's permissions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 16, 2010 |
| Suse | — | Upgrade kernel-symsUpgrade um-host-install-initrdUpgrade kernel-sn2Upgrade kernel-smpUpgrade kernel-umUpgrade kernel-s390-debugUpgrade kernel-s390x-debugUpgrade kernel-xenpaeUpgrade xen-kmpUpgrade kernel-pmac64Upgrade kernel-s390Upgrade kernel-defaultUpgrade kernel-s390xUpgrade kernel-debugUpgrade kernel-bigsmpUpgrade kernel-iseries64Upgrade kernel-64k-pagesizeUpgrade um-host-kernelUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-pseries64 | Feb 17, 2015 | Mar 16, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.31-802-st1-5Upgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.32-22-generic-paeUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.32-22-genericUpgrade linux-image-2.6.32-22-sparc64Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.32-22-386Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-22-virtualUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.32-22-ia64Upgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.32-22-lpiaUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.32-22-powerpcUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-22-versatileUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.32-306-ec2Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.32-22-sparc64-dbgsymUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.32-22-generic-pae-dbgsymUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.32-22-versatile-dbgsymUpgrade linux-image-2.6.32-22-server-dbgsymUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.32-22-powerpc-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-22-serverUpgrade linux-image-2.6.32-22-powerpc-smp-dbgsymUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.32-22-sparc64-smp-dbgsymUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.32-22-lpia-dbgsymUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.32-22-generic-dbgsymUpgrade linux-image-2.6.32-22-preempt-dbgsymUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.32-22-preemptUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-22-386-dbgsymUpgrade linux-image-2.6.32-22-ia64-dbgsymUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.32-22-powerpc-dbgsymUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.32-22-powerpc64-smp-dbgsymUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.32-22-powerpc64-smpUpgrade linux-image-2.6.32-22-sparc64-smpUpgrade linux-image-2.6.33-501-omapUpgrade linux-image-2.6.32-205-doveUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.15-55-mckinley-smp | Nov 8, 2024 | Mar 16, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub