fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-paeUpgrade kernel-symsUpgrade kernel-pae-develUpgrade kernel-trace-baseUpgrade kernel-defaultUpgrade kernel-trace-develUpgrade xen-kmp-paeUpgrade xen-kmp-traceUpgrade kernel-ec2Upgrade kernel-default-baseUpgrade kernel-ec2-develUpgrade kernel-default-manUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-xen-extraUpgrade kernel-ppc64-baseUpgrade kernel-default-extraUpgrade kernel-ppc64Upgrade kernel-pae-extraUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-sourceUpgrade kernel-ec2-baseUpgrade xen-kmp-defaultUpgrade kernel-traceUpgrade kernel-trace-extraUpgrade kernel-ppc64-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-26-serverUpgrade linux-image-3.0.0-26-powerpc64-smpUpgrade linux-image-3.0.0-26-powerpcUpgrade linux-image-3.0.0-26-genericUpgrade linux-image-3.0.0-26-generic-paeUpgrade linux-image-3.0.0-26-omapUpgrade linux-image-3.0.0-26-virtualUpgrade linux-image-3.0.0-26-powerpc-smp | Nov 8, 2024 | Jun 21, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub