mm/shmem.c in the Linux kernel before 2.6.28-rc3, when strict overcommit is enabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade oracleasm-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade kernel-kdumpUpgrade kernel-ppc64-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-defaultUpgrade iscsitarget-kmp-defaultUpgrade kernel-vmi-baseUpgrade ext4dev-kmp-ppc64Upgrade kernel-vmiUpgrade kernel-sourceUpgrade kernel-paeUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-paeUpgrade kernel-symsUpgrade kernel-default-baseUpgrade ext4dev-kmp-vmiUpgrade kernel-xenUpgrade kernel-default-man | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.33-502-omapUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.32-24-versatileUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-24-serverUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.32-308-ec2Upgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-207-doveUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.32-24-386Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.32-24-ia64 | Nov 8, 2024 | Jun 3, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub