The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corruption and panic) via a crafted application that triggers certain lock contention.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade iscsitarget-kmp-rtUpgrade ofed-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-rt_trace-baseUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade drbd-kmp-rt_traceUpgrade kernel-source-rtUpgrade drbd-kmp-rtUpgrade ocfs2-kmp-rt_traceUpgrade brocade-bna-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rt_trace-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade cluster-network-kmp-rt_traceUpgrade cluster-network-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt_trace | Nov 18, 2015 | Nov 18, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub