The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-abi-whitelistsUpgrade perfUpgrade kernel-firmware | Dec 1, 2016 | Feb 28, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 28, 2014 |
| Suse | — | Upgrade kernel-default | Dec 18, 2015 | Feb 28, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-63-powerpc64-smpUpgrade linux-image-3.5.0-241-omap4Upgrade linux-image-3.2.0-1446-omap4Upgrade linux-image-3.2.0-63-omapUpgrade linux-image-3.2.0-63-highbankUpgrade linux-image-3.2.0-63-generic-paeUpgrade linux-image-3.5.0-49-powerpc-smpUpgrade linux-image-3.2.0-63-virtualUpgrade linux-image-3.5.0-49-omapUpgrade linux-image-3.5.0-49-highbankUpgrade linux-image-3.2.0-63-genericUpgrade linux-image-3.5.0-49-genericUpgrade linux-image-3.8.0-39-genericUpgrade linux-image-3.5.0-49-powerpc64-smpUpgrade linux-image-3.11.0-20-generic-lpaeUpgrade linux-image-3.11.0-20-genericUpgrade linux-image-3.2.0-63-powerpc-smp | Nov 8, 2024 | Feb 28, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub