The evm_update_evmxattr function in security/integrity/evm/evm_crypto.c in the Linux kernel before 3.7.5, when the Extended Verification Module (EVM) is enabled, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an attempted removexattr operation on an inode of a sockfs filesystem.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-26-powerpc64-smpUpgrade linux-image-3.2.0-39-powerpc-smpUpgrade linux-image-3.2.0-39-highbankUpgrade linux-image-3.2.0-39-virtualUpgrade linux-image-3.2.0-39-omapUpgrade linux-image-3.5.0-221-omap4Upgrade linux-image-3.2.0-39-generic-paeUpgrade linux-image-3.5.0-26-omapUpgrade linux-image-3.5.0-26-powerpc-smpUpgrade linux-image-3.2.0-1427-omap4Upgrade linux-image-3.2.0-39-genericUpgrade linux-image-3.2.0-39-powerpc64-smpUpgrade linux-image-3.5.0-26-highbankUpgrade linux-image-3.5.0-26-generic | Nov 8, 2024 | Feb 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub