The log_prefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service (buffer overflow and system crash) by leveraging /dev/kmsg write access and triggering a call_console_drivers function call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Feb 28, 2013 |
| Suse | — | Upgrade kernel-pae-develUpgrade ocfs2-kmp-xenUpgrade kernel-xen-baseUpgrade kernel-pae-extraUpgrade kernel-default-manUpgrade xen-kmp-paeUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2Upgrade kernel-xen-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-traceUpgrade kernel-default-extraUpgrade kernel-trace-develUpgrade kernel-ec2-baseUpgrade kernel-pae-baseUpgrade ocfs2-kmp-paeUpgrade kernel-ppc64-baseUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-symsUpgrade ocfs2-kmp-ppc64Upgrade cluster-network-kmp-ppc64Upgrade gfs2-kmp-paeUpgrade ocfs2-kmp-defaultUpgrade kernel-default-develUpgrade cluster-network-kmp-traceUpgrade kernel-traceUpgrade cluster-network-kmp-xenUpgrade gfs2-kmp-ppc64Upgrade xen-kmp-traceUpgrade gfs2-kmp-xenUpgrade kernel-trace-extraUpgrade cluster-network-kmp-paeUpgrade kernel-xenUpgrade kernel-trace-baseUpgrade xen-kmp-defaultUpgrade gfs2-kmp-traceUpgrade kernel-xen-extraUpgrade sle-hae-releaseUpgrade kernel-ppc64-develUpgrade kernel-ppc64Upgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-pae | Feb 17, 2015 | Feb 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-39-virtualUpgrade linux-image-3.2.0-39-generic-paeUpgrade linux-image-3.2.0-39-highbankUpgrade linux-image-3.2.0-39-powerpc-smpUpgrade linux-image-3.2.0-39-genericUpgrade linux-image-3.2.0-1427-omap4Upgrade linux-image-3.2.0-39-powerpc64-smpUpgrade linux-image-3.2.0-39-omap | Nov 8, 2024 | Feb 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub