The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly obtain the value of a certain _PAGE_EXEC_4U bit and consequently does not properly implement a non-executable stack, which makes it easier for context-dependent attackers to exploit stack-based buffer overflows via a crafted application.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.33-502-omapUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.32-24-versatileUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.32-308-ec2Upgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.32-24-ia64Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.32-207-doveUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.32-24-386Upgrade linux-image-2.6.32-24-serverUpgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.31-22-server | Nov 8, 2024 | May 7, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub