The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-xen-devel | Dec 1, 2016 | Dec 22, 2010 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Dec 22, 2010 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-vmiUpgrade kernel-rt_traceUpgrade preload-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-rtUpgrade kernel-source-rtUpgrade drbd-kmp-rtUpgrade kernel-desktop-baseUpgrade kernel-sourceUpgrade brocade-bna-kmp-rtUpgrade kernel-debug-baseUpgrade kernel-xenUpgrade kernel-vmi-develUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-vmi-baseUpgrade kernel-ec2-baseUpgrade kernel-vanillaUpgrade kernel-traceUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-pae-baseUpgrade kernel-rt_trace-baseUpgrade kernel-rt-baseUpgrade kernel-symsUpgrade kernel-rt_trace-develUpgrade iscsitarget-kmp-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-vanilla-baseUpgrade kernel-ec2Upgrade cluster-network-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade drbd-kmp-rt_traceUpgrade kernel-trace-develUpgrade preload-kmp-desktopUpgrade kernel-trace-baseUpgrade kernel-paeUpgrade kernel-desktop-develUpgrade ofed-kmp-rtUpgrade kernel-ec2-extraUpgrade kernel-xen-baseUpgrade kernel-defaultUpgrade kernel-develUpgrade ocfs2-kmp-rt_traceUpgrade kernel-debug-develUpgrade kernel-vanilla-develUpgrade kernel-source-vanillaUpgrade kernel-pae-develUpgrade kernel-desktop | Feb 17, 2015 | Dec 22, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.35-27-powerpc-smpUpgrade linux-image-2.6.35-27-serverUpgrade linux-image-2.6.32-29-lpiaUpgrade linux-image-2.6.35-27-generic-paeUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-29-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-29-ia64Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-29-preemptUpgrade linux-image-2.6.32-29-powerpcUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-27-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-29-386Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-29-sparc64-smpUpgrade linux-image-2.6.32-29-serverUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-27-genericUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-27-versatileUpgrade linux-image-2.6.32-29-generic-paeUpgrade linux-image-2.6.35-27-virtualUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-27-powerpcUpgrade linux-image-2.6.35-27-omapUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-29-powerpc-smpUpgrade linux-image-2.6.32-29-versatileUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-29-virtualUpgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.32-29-genericUpgrade linux-image-2.6.32-313-ec2Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-29-sparc64Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-itanium | Nov 8, 2024 | Dec 22, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Dec 22, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub