The Linux kernel before 2.6.39 does not properly create transparent huge pages in response to a MAP_PRIVATE mmap system call on /dev/zero, which allows local users to cause a denial of service (system crash) via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 1, 2013 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-pae-baseUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade kernel-ppc64-develUpgrade kernel-xen-develUpgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade kernel-ppc64Upgrade kernel-pae-develUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-trace-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-default-devel | Aug 9, 2024 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-12-server | Nov 8, 2024 | Mar 1, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub