The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-firmwareUpgrade perf | Dec 1, 2016 | Feb 28, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 28, 2014 |
| Suse | — | Upgrade kernel-default | Dec 18, 2015 | Feb 28, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-63-virtualUpgrade linux-image-3.8.0-39-genericUpgrade linux-image-3.11.0-20-genericUpgrade linux-image-3.5.0-49-highbankUpgrade linux-image-3.2.0-63-powerpc-smpUpgrade linux-image-3.5.0-49-powerpc64-smpUpgrade linux-image-3.5.0-49-genericUpgrade linux-image-3.11.0-20-generic-lpaeUpgrade linux-image-3.2.0-63-genericUpgrade linux-image-3.5.0-49-omapUpgrade linux-image-3.2.0-63-powerpc64-smpUpgrade linux-image-3.5.0-49-powerpc-smpUpgrade linux-image-3.5.0-241-omap4Upgrade linux-image-3.2.0-63-generic-paeUpgrade linux-image-3.2.0-63-highbankUpgrade linux-image-3.2.0-1446-omap4Upgrade linux-image-3.2.0-63-omap | Nov 8, 2024 | Feb 28, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub