Multiple race conditions in the madvise_remove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local users to cause a denial of service (use-after-free and system crash) via vectors involving a (1) munmap or (2) close system call.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-firmwareUpgrade kernel-develUpgrade kernel-debugUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-PAE-devel | Dec 1, 2016 | Oct 3, 2012 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 4, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Oct 3, 2012 |
| Suse | — | Upgrade hyper-v-kmp-paeUpgrade kernel-pae-baseUpgrade ext4dev-kmp-paeUpgrade btrfs-kmp-paeUpgrade kernel-xen-develUpgrade kernel-ec2Upgrade kernel-xen-baseUpgrade xen-kmp-traceUpgrade kernel-default-manUpgrade btrfs-kmp-xenUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-symsUpgrade ext4dev-kmp-defaultUpgrade xen-kmp-defaultUpgrade kernel-pae-develUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade xen-kmp-paeUpgrade kernel-trace-develUpgrade hyper-v-kmp-traceUpgrade kernel-defaultUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-traceUpgrade hyper-v-kmp-defaultUpgrade kernel-ec2-develUpgrade btrfs-kmp-defaultUpgrade kernel-ec2-base | Jan 12, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-43-sparc64Upgrade linux-image-3.0.0-24-powerpc64-smpUpgrade linux-image-2.6.32-43-virtualUpgrade linux-image-3.2.0-1417-omap4Upgrade linux-image-2.6.32-43-generic-paeUpgrade linux-image-3.2.0-29-powerpc64-smpUpgrade linux-image-2.6.38-16-virtualUpgrade linux-image-2.6.38-16-powerpc64-smpUpgrade linux-image-3.2.0-29-virtualUpgrade linux-image-2.6.32-43-genericUpgrade linux-image-3.0.0-24-genericUpgrade linux-image-3.0.0-24-powerpc-smpUpgrade linux-image-3.2.0-29-powerpc-smpUpgrade linux-image-2.6.32-43-powerpcUpgrade linux-image-2.6.32-43-powerpc64-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-16-generic-paeUpgrade linux-image-3.2.0-29-generic-paeUpgrade linux-image-2.6.38-16-powerpc-smpUpgrade linux-image-3.2.0-29-highbankUpgrade linux-image-2.6.32-43-lpiaUpgrade linux-image-3.0.0-24-serverUpgrade linux-image-3.0.0-24-omapUpgrade linux-image-3.0.0-24-powerpcUpgrade linux-image-3.0.0-24-generic-paeUpgrade linux-image-2.6.32-43-preemptUpgrade linux-image-2.6.38-16-powerpcUpgrade linux-image-2.6.32-43-powerpc-smpUpgrade linux-image-2.6.32-43-serverUpgrade linux-image-3.0.0-1214-omap4Upgrade linux-image-3.2.0-29-omapUpgrade linux-image-2.6.38-16-genericUpgrade linux-image-2.6.32-43-386Upgrade linux-image-2.6.38-16-omapUpgrade linux-image-2.6.32-43-sparc64-smpUpgrade linux-image-2.6.38-16-versatileUpgrade linux-image-3.0.0-24-virtualUpgrade linux-image-3.2.0-29-genericUpgrade linux-image-2.6.38-16-serverUpgrade linux-image-2.6.32-348-ec2Upgrade linux-image-2.6.32-43-ia64Upgrade linux-image-2.6.32-43-versatile | Nov 8, 2024 | Oct 4, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub