Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of service (BUG_ON and system crash) by leveraging the ability to mount a FUSE filesystem.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 24, 2012 |
| Suse | — | Upgrade cluster-network-kmp-rtUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade ocfs2-kmp-rt_traceUpgrade kernel-desktopUpgrade kernel-debugUpgrade preload-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-vanilla-develUpgrade kernel-source-vanillaUpgrade ofed-kmp-rtUpgrade kernel-source-rtUpgrade kernel-vanilla-baseUpgrade kernel-paeUpgrade kernel-docsUpgrade iscsitarget-kmp-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-xen-baseUpgrade kernel-desktop-develUpgrade kernel-trace-baseUpgrade kernel-ec2Upgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade preload-kmp-desktopUpgrade kernel-develUpgrade kernel-xen-develUpgrade drbd-kmp-rt_traceUpgrade kernel-debug-develUpgrade kernel-vmi-develUpgrade kernel-debug-baseUpgrade ocfs2-kmp-rtUpgrade kernel-rt_traceUpgrade kernel-ec2-develUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-rtUpgrade kernel-rt_trace-baseUpgrade kernel-symsUpgrade drbd-kmp-rtUpgrade kernel-rt_trace-develUpgrade kernel-vanillaUpgrade kernel-desktop-baseUpgrade kernel-syms-rtUpgrade kernel-pae-baseUpgrade kernel-ec2-baseUpgrade brocade-bna-kmp-rtUpgrade kernel-default-develUpgrade kernel-vmi-baseUpgrade kernel-vmiUpgrade kernel-traceUpgrade kernel-rt-baseUpgrade SUSE-Linux-Enterprise-RT-release | Feb 17, 2015 | May 24, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-32-powerpc-smpUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.35-32-omapUpgrade linux-image-2.6.35-32-serverUpgrade linux-image-2.6.32-35-genericUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-32-versatileUpgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-2.6.35-32-generic-paeUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.32-35-preemptUpgrade linux-image-2.6.32-419-doveUpgrade linux-image-2.6.32-35-virtualUpgrade linux-image-2.6.32-35-sparc64Upgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-219-doveUpgrade linux-image-2.6.32-35-386Upgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.35-32-virtualUpgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.32-319-ec2Upgrade linux-image-2.6.32-35-ia64Upgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.35-32-powerpc64-smpUpgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.32-35-serverUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.35-32-powerpcUpgrade linux-image-2.6.32-35-powerpc-smpUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.35-32-generic | Nov 8, 2024 | May 24, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub