crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-firmwareUpgrade kernel-headersUpgrade kernel-docUpgrade perfUpgrade kernel-debugUpgrade python-perfUpgrade kernel-debug-devel | Dec 1, 2016 | May 24, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | May 24, 2012 |
| Suse | — | Upgrade kernel-vanilla-baseUpgrade kernel-ec2-baseUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-rt_traceUpgrade kernel-debug-baseUpgrade kernel-rt-develUpgrade preload-kmp-desktopUpgrade kernel-desktop-develUpgrade kernel-ec2-develUpgrade kernel-rtUpgrade kernel-desktop-baseUpgrade kernel-source-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-vmi-baseUpgrade kernel-rt_trace-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-source-vanillaUpgrade kernel-ec2-extraUpgrade kernel-pae-develUpgrade kernel-vanillaUpgrade iscsitarget-kmp-rtUpgrade ocfs2-kmp-rt_traceUpgrade drbd-kmp-rt_traceUpgrade kernel-trace-develUpgrade kernel-traceUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-symsUpgrade kernel-rt-baseUpgrade kernel-trace-baseUpgrade kernel-vanilla-develUpgrade kernel-xen-develUpgrade kernel-vmiUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-debugUpgrade kernel-pae-baseUpgrade drbd-kmp-rtUpgrade kernel-paeUpgrade ocfs2-kmp-rtUpgrade cluster-network-kmp-rtUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-desktopUpgrade kernel-ec2Upgrade ofed-kmp-rtUpgrade brocade-bna-kmp-rt | Feb 17, 2015 | May 24, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-31-genericUpgrade linux-image-2.6.35-31-serverUpgrade linux-image-3.0.0-14-generic-paeUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-37-sparc64Upgrade linux-image-2.6.32-37-versatileUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.35-31-powerpc-smpUpgrade linux-image-2.6.32-37-virtualUpgrade linux-image-3.0.0-14-serverUpgrade linux-image-3.0.0-14-virtualUpgrade linux-image-3.0.0-14-powerpcUpgrade linux-image-2.6.32-37-sparc64-smpUpgrade linux-image-2.6.35-31-generic-paeUpgrade linux-image-2.6.32-341-ec2Upgrade linux-image-2.6.35-31-powerpcUpgrade linux-image-2.6.32-37-preemptUpgrade linux-image-2.6.32-37-powerpc64-smpUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-2.6.32-37-powerpcUpgrade linux-image-2.6.32-37-serverUpgrade linux-image-2.6.32-37-ia64Upgrade linux-image-2.6.32-421-doveUpgrade linux-image-2.6.32-37-lpiaUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-3.0.0-14-omapUpgrade linux-image-3.0.0-14-powerpc64-smpUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-37-genericUpgrade linux-image-2.6.35-31-omapUpgrade linux-image-2.6.32-37-generic-paeUpgrade linux-image-2.6.35-31-powerpc64-smpUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-3.0.0-14-genericUpgrade linux-image-2.6.32-37-386Upgrade linux-image-2.6.38-13-omapUpgrade linux-image-3.0.0-14-powerpc-smpUpgrade linux-image-2.6.32-37-powerpc-smpUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.35-31-virtualUpgrade linux-image-2.6.35-31-versatile | Nov 8, 2024 | May 24, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub