The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-develUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-xen | Dec 1, 2016 | Jun 24, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 24, 2011 |
| Suse | — | Upgrade kernel-kdumpUpgrade kernel-vanilla-baseUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-desktop-develUpgrade kernel-defaultUpgrade kernel-paeUpgrade kernel-default-baseUpgrade kernel-vmiUpgrade kernel-vmi-baseUpgrade kernel-ec2-extraUpgrade preload-kmp-defaultUpgrade kernel-smpUpgrade kernel-trace-baseUpgrade kernel-bigsmpUpgrade kernel-xenpaeUpgrade preload-kmp-desktopUpgrade kernel-ec2Upgrade kernel-vanilla-develUpgrade kernel-vanillaUpgrade kernel-iseries64Upgrade kernel-vmipaeUpgrade kernel-symsUpgrade kernel-traceUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-pae-develUpgrade kernel-desktop-baseUpgrade kernel-pae-baseUpgrade kernel-ec2-baseUpgrade kernel-xenUpgrade kernel-desktopUpgrade kernel-trace-develUpgrade kernel-ec2-develUpgrade kernel-ppc64Upgrade kernel-vmi-develUpgrade kernel-xen-baseUpgrade kernel-debug-baseUpgrade kernel-sourceUpgrade kernel-kdumppaeUpgrade kernel-xen-develUpgrade kernel-default-devel | Feb 17, 2015 | Jun 24, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.32-34-virtual | Nov 8, 2024 | Jun 24, 2011 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380Upgrade VMware ESX 4.0 to build number 787047 | Sep 17, 2012 | Jun 24, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub