fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-trace-develUpgrade kernel-ppc64-baseUpgrade kernel-pae-develUpgrade kernel-xen-develUpgrade kernel-default-manUpgrade kernel-xenUpgrade xen-kmp-paeUpgrade kernel-symsUpgrade kernel-ec2-develUpgrade kernel-paeUpgrade kernel-trace-baseUpgrade kernel-ec2Upgrade kernel-default-baseUpgrade xen-kmp-traceUpgrade kernel-defaultUpgrade kernel-xen-extraUpgrade kernel-default-develUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kernel-default-extraUpgrade kernel-ppc64-develUpgrade kernel-trace-extraUpgrade kernel-xen-baseUpgrade kernel-pae-extraUpgrade kernel-sourceUpgrade xen-kmp-defaultUpgrade kernel-ec2-baseUpgrade kernel-trace | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-26-serverUpgrade linux-image-3.0.0-26-powerpcUpgrade linux-image-3.0.0-26-powerpc64-smpUpgrade linux-image-3.0.0-26-genericUpgrade linux-image-3.0.0-26-virtualUpgrade linux-image-3.0.0-26-generic-paeUpgrade linux-image-3.0.0-26-omapUpgrade linux-image-3.0.0-26-powerpc-smp | Nov 8, 2024 | Jun 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub