mm/shmem.c in the Linux kernel before 2.6.28-rc3, when strict overcommit is enabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-default-manUpgrade ext4dev-kmp-vmiUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-vmiUpgrade kernel-xenUpgrade kernel-symsUpgrade ext4dev-kmp-paeUpgrade kernel-default-baseUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64-baseUpgrade ext4dev-kmp-ppc64Upgrade kernel-vmi-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade iscsitarget-kmp-defaultUpgrade kernel-kdumpUpgrade oracleasm-kmp-defaultUpgrade kernel-default | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.32-24-versatileUpgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.32-308-ec2Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.33-502-omapUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.32-24-serverUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.32-207-doveUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.32-24-386Upgrade linux-image-2.6.32-24-ia64Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.31-22-powerpc-smp | Nov 8, 2024 | Jun 3, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub