The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local users to obtain sensitive information from kernel memory via a crafted iso9660 image.
CVSS Details
- CVSS 3.1 Base Score: 5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-docUpgrade kernel-debugUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-abi-whitelistsUpgrade kernel-headersUpgrade kernel-tools-libs-devel | Dec 1, 2016 | Jan 9, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 9, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 8, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jan 9, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 7, 2015 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2 | Dec 18, 2015 | Jan 9, 2015 |
| Ubuntu | — | Upgrade linux-image-3.2.0-77-virtualUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.2.0-77-genericUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.13.0-46-genericUpgrade linux-image-2.6.32-73-genericUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-2.6.32-73-versatileUpgrade linux-image-2.6.32-73-preemptUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.2.0-77-highbankUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-2.6.32-73-generic-paeUpgrade linux-image-2.6.32-73-lpiaUpgrade linux-image-3.2.0-77-generic-paeUpgrade linux-image-2.6.32-73-powerpcUpgrade linux-image-3.2.0-1460-omap4Upgrade linux-image-3.2.0-77-powerpc64-smpUpgrade linux-image-2.6.32-73-sparc64Upgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-2.6.32-73-386Upgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.2.0-77-omapUpgrade linux-image-2.6.32-73-ia64Upgrade linux-image-2.6.32-73-powerpc64-smpUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-2.6.32-376-ec2Upgrade linux-image-2.6.32-73-virtualUpgrade linux-image-2.6.32-73-powerpc-smpUpgrade linux-image-2.6.32-73-sparc64-smpUpgrade linux-image-3.2.0-77-powerpc-smpUpgrade linux-image-2.6.32-73-server | Nov 8, 2024 | Jan 9, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub