kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which allows local users to cause a denial of service (NULL pointer dereference and outage of all function tracing files) via an lseek call on a file descriptor associated with the set_ftrace_filter file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 30, 2010 |
| Suse | — | Upgrade kernel-trace-develUpgrade kernel-pae-develUpgrade kernel-xen-baseUpgrade kernel-ppc64-baseUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-xen-develUpgrade kernel-trace-baseUpgrade kernel-docsUpgrade kernel-paeUpgrade kernel-pae-baseUpgrade kernel-traceUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-ppc64Upgrade kernel-default-manUpgrade kernel-xenUpgrade kernel-ppc64-develUpgrade kernel-default-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.32-27-lpia | Nov 8, 2024 | Sep 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub