The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service (incorrect free operations and system crash) via an open system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade perfUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-debugUpgrade python-perfUpgrade kernel-headersUpgrade kernel | Dec 1, 2016 | Jun 23, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 23, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 23, 2014 |
| Suse | — | Upgrade kernel-default | Dec 18, 2015 | Jun 23, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-369-ec2Upgrade linux-image-2.6.32-65-genericUpgrade linux-image-2.6.32-65-ia64Upgrade linux-image-2.6.32-65-powerpcUpgrade linux-image-2.6.32-65-generic-paeUpgrade linux-image-2.6.32-65-versatileUpgrade linux-image-2.6.32-65-powerpc-smpUpgrade linux-image-2.6.32-65-386Upgrade linux-image-2.6.32-65-virtualUpgrade linux-image-2.6.32-65-powerpc64-smpUpgrade linux-image-2.6.32-65-preemptUpgrade linux-image-2.6.32-65-sparc64-smpUpgrade linux-image-2.6.32-65-sparc64Upgrade linux-image-2.6.32-65-serverUpgrade linux-image-2.6.32-65-lpia | Nov 8, 2024 | Jun 23, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub