crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-firmwareUpgrade kernel-debugUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-devel | Dec 1, 2016 | May 24, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | May 24, 2012 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-debug-baseUpgrade kernel-rt_trace-develUpgrade kernel-rt_trace-baseUpgrade kernel-vmi-baseUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-source-vanillaUpgrade kernel-rt_traceUpgrade kernel-vmi-develUpgrade preload-kmp-defaultUpgrade preload-kmp-desktopUpgrade kernel-desktop-develUpgrade kernel-vanilla-baseUpgrade kernel-ec2-baseUpgrade kernel-desktop-baseUpgrade kernel-ec2-develUpgrade kernel-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-rt-develUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade kernel-xen-develUpgrade iscsitarget-kmp-rtUpgrade kernel-pae-baseUpgrade kernel-default-baseUpgrade kernel-desktopUpgrade kernel-debugUpgrade kernel-paeUpgrade drbd-kmp-rtUpgrade kernel-symsUpgrade kernel-vanillaUpgrade brocade-bna-kmp-rtUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade ofed-kmp-rtUpgrade kernel-traceUpgrade kernel-xenUpgrade kernel-rt-baseUpgrade kernel-vanilla-develUpgrade cluster-network-kmp-rtUpgrade drbd-kmp-rt_traceUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade ocfs2-kmp-rt_traceUpgrade kernel-vmiUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade kernel-ec2 | Feb 17, 2015 | May 24, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.32-37-powerpcUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-37-powerpc64-smpUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-3.0.0-14-virtualUpgrade linux-image-3.0.0-14-serverUpgrade linux-image-2.6.32-37-sparc64Upgrade linux-image-2.6.35-31-powerpc-smpUpgrade linux-image-2.6.35-31-genericUpgrade linux-image-2.6.32-37-virtualUpgrade linux-image-2.6.35-31-powerpcUpgrade linux-image-2.6.35-31-generic-paeUpgrade linux-image-3.0.0-14-powerpcUpgrade linux-image-2.6.32-37-sparc64-smpUpgrade linux-image-2.6.32-341-ec2Upgrade linux-image-3.0.0-14-generic-paeUpgrade linux-image-2.6.35-31-serverUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.32-37-preemptUpgrade linux-image-2.6.32-37-versatileUpgrade linux-image-2.6.32-37-386Upgrade linux-image-3.0.0-14-powerpc-smpUpgrade linux-image-2.6.35-31-virtualUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.32-421-doveUpgrade linux-image-2.6.32-37-genericUpgrade linux-image-2.6.32-37-lpiaUpgrade linux-image-3.0.0-14-genericUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.35-31-versatileUpgrade linux-image-3.0.0-14-powerpc64-smpUpgrade linux-image-2.6.32-37-powerpc-smpUpgrade linux-image-2.6.35-31-powerpc64-smpUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.32-37-ia64Upgrade linux-image-2.6.32-37-generic-paeUpgrade linux-image-2.6.35-31-omapUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.32-37-serverUpgrade linux-image-3.0.0-14-omapUpgrade linux-image-2.6.35-903-omap4 | Nov 8, 2024 | May 24, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub