The NFS implementation in Linux kernel before 2.6.31-rc6 calls certain functions without properly initializing certain data, which allows local users to cause a denial of service (NULL pointer dereference and O_DIRECT oops), as demonstrated using diotest4 from LTP.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-PAE | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Jan 27, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380Upgrade VMware ESX 4.0 to build number 787047 | Sep 17, 2012 | Jan 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub