Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-PAE-devel | Dec 1, 2016 | May 3, 2011 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 3, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 13, 2011 |
| Suse | — | Upgrade kernel-trace-develUpgrade kernel-defaultUpgrade kernel-pae-develUpgrade kernel-xen-develUpgrade kernel-default-baseUpgrade kernel-pae-baseUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-xen-baseUpgrade kernel-ppc64-baseUpgrade kernel-default-manUpgrade kernel-ppc64-develUpgrade kernel-paeUpgrade kernel-traceUpgrade kernel-ppc64Upgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-trace-baseUpgrade kernel-xen | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.32-33-powerpc64-smpUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-33-virtualUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.32-33-preemptUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-33-lpiaUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-33-sparc64-smp | Nov 8, 2024 | May 3, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | May 3, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub