The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-xen | Dec 1, 2016 | Dec 6, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 6, 2010 |
| Suse | — | Upgrade ofed-develUpgrade ofed-kmp-paeUpgrade ofed-kmp-traceUpgrade ofed-docUpgrade ofed-kmp-defaultUpgrade ofed-kmp-ppc64Upgrade ofed | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-25-lpiaUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-25-preemptUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.35-22-versatileUpgrade linux-image-2.6.35-22-generic-paeUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.35-22-omapUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.32-25-genericUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-25-generic-paeUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.32-25-virtualUpgrade linux-image-2.6.32-25-sparc64-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.35-22-powerpcUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-25-ia64Upgrade linux-image-2.6.32-25-versatileUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.35-22-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.32-25-serverUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.32-25-sparc64Upgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.35-22-genericUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.35-22-virtualUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.32-25-powerpc-smpUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.35-22-serverUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.35-22-powerpc64-smpUpgrade linux-image-2.6.32-25-powerpcUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-309-ec2Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.32-25-386Upgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.32-25-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-xeon | Nov 8, 2024 | Dec 6, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Dec 6, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub