The bcm_release function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 9, 2011 |
| Suse | — | Upgrade kernel-pae-baseUpgrade kernel-ec2Upgrade btrfs-kmp-defaultUpgrade kernel-pae-develUpgrade hyper-v-kmp-defaultUpgrade kernel-traceUpgrade kernel-trace-develUpgrade kernel-pae-extraUpgrade kernel-paeUpgrade ext4dev-kmp-paeUpgrade kernel-default-extraUpgrade ext4dev-kmp-defaultUpgrade hyper-v-kmp-paeUpgrade kernel-ppc64-baseUpgrade kernel-xenUpgrade ext4dev-kmp-ppc64Upgrade kernel-default-manUpgrade kernel-trace-baseUpgrade kernel-desktop-develUpgrade btrfs-kmp-xenUpgrade kernel-default-develUpgrade btrfs-kmp-paeUpgrade kernel-ec2-baseUpgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-symsUpgrade ext4dev-kmp-xenUpgrade kernel-xen-develUpgrade kernel-defaultUpgrade kernel-xen-baseUpgrade kernel-ppc64-develUpgrade kernel-xen-extraUpgrade kernel-default-base | Feb 17, 2015 | May 9, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.32-33-lpiaUpgrade linux-image-2.6.32-33-powerpc64-smpUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.32-33-preemptUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-33-sparc64-smpUpgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-33-virtual | Nov 8, 2024 | May 9, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub