fs/jfs/xattr.c in the Linux kernel before 2.6.35.2 does not properly handle a certain legacy format for storage of extended attributes, which might allow local users by bypass intended xattr namespace restrictions via an "os2." substring at the beginning of a name.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-pae-baseUpgrade kernel-pae-develUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade ext4dev-kmp-vmiUpgrade kernel-ppc64-baseUpgrade kernel-xenUpgrade kernel-defaultUpgrade ext4dev-kmp-ppc64Upgrade kernel-default-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-paeUpgrade ext4dev-kmp-paeUpgrade kernel-xen-develUpgrade iscsitarget-kmp-defaultUpgrade kernel-vmiUpgrade kernel-ppc64Upgrade kernel-xen-baseUpgrade kernel-sourceUpgrade kernel-kdumpUpgrade oracleasm-kmp-defaultUpgrade kernel-ppc64-develUpgrade kernel-symsUpgrade kernel-vmi-baseUpgrade kernel-trace-baseUpgrade kernel-traceUpgrade ext4dev-kmp-xen | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-25-virtualUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.35-22-genericUpgrade linux-image-2.6.35-22-versatileUpgrade linux-image-2.6.32-25-serverUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.32-25-sparc64-smpUpgrade linux-image-2.6.32-25-lpiaUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.32-25-powerpc64-smpUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.32-25-powerpc-smpUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.32-25-powerpcUpgrade linux-image-2.6.35-22-powerpcUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-25-preemptUpgrade linux-image-2.6.32-25-386Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.32-25-ia64Upgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.35-22-serverUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.35-22-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.32-25-sparc64Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.32-25-genericUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.32-309-ec2Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-22-omapUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.35-22-powerpc64-smpUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.35-22-virtualUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.32-25-generic-paeUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-25-versatileUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-22-generic-pae | Nov 8, 2024 | Sep 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub