Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | May 2, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 2, 2018 |
| Oracle_linux | — | Upgrade kernel | Jun 26, 2018 | May 2, 2016 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Jun 20, 2018 | May 2, 2016 |
| Ubuntu | — | Upgrade linux-ti-omap4Upgrade linux-armadaxpUpgrade linux | Nov 19, 2024 | May 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub