Integer overflow in the sys_oabi_semtimedop function in arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 2.6.39 on the ARM platform, when CONFIG_OABI_COMPAT is enabled, allows local users to gain privileges or cause a denial of service (heap memory corruption) by providing a crafted argument and leveraging a race condition.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.32-33-versatileUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.32-33-generic-paeUpgrade linux-image-2.6.32-33-virtualUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.35-32-powerpc64-smpUpgrade linux-image-2.6.35-32-serverUpgrade linux-image-2.6.32-33-genericUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.32-33-ia64Upgrade linux-image-2.6.32-33-serverUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.32-33-powerpcUpgrade linux-image-2.6.35-32-powerpcUpgrade linux-image-2.6.32-33-sparc64-smpUpgrade linux-image-2.6.35-32-virtualUpgrade linux-image-2.6.35-32-powerpc-smpUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.32-33-powerpc-smpUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.35-32-versatileUpgrade linux-image-2.6.35-32-omapUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-33-lpiaUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-32-genericUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.35-32-generic-paeUpgrade linux-image-2.6.32-33-386Upgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.32-33-sparc64Upgrade linux-image-2.6.32-33-preemptUpgrade linux-image-2.6.32-33-powerpc64-smp | Nov 8, 2024 | Jun 13, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub