The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service (extended runtime of kernel code) by creating many different files whose names are associated with the same CRC32C hash value.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2013 |
| Suse | — | Upgrade kernel-debug-baseUpgrade kernel-develUpgrade kernel-vanilla-develUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-paeUpgrade kernel-vanillaUpgrade kernel-pae-baseUpgrade kernel-desktopUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-ec2-baseUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-xen-baseUpgrade kernel-desktop-baseUpgrade kernel-trace-baseUpgrade kernel-desktop-develUpgrade kernel-trace-develUpgrade kernel-source-vanillaUpgrade kernel-xen-develUpgrade kernel-pae-develUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-debug | Feb 17, 2015 | Feb 18, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-40-highbankUpgrade linux-image-3.2.0-56-omapUpgrade linux-image-3.2.0-56-powerpc64-smpUpgrade linux-image-3.5.0-40-powerpc64-smpUpgrade linux-image-3.2.0-56-highbankUpgrade linux-image-3.2.0-56-genericUpgrade linux-image-3.2.0-56-powerpc-smpUpgrade linux-image-3.5.0-40-omapUpgrade linux-image-3.2.0-56-virtualUpgrade linux-image-3.2.0-56-generic-paeUpgrade linux-image-3.5.0-232-omap4Upgrade linux-image-3.5.0-40-powerpc-smpUpgrade linux-image-3.5.0-40-genericUpgrade linux-image-3.2.0-1440-omap4 | Nov 8, 2024 | Feb 18, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub