The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service (system crash) via a rename system call, related to fs/namei.c and fs/open.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-devel | Jul 1, 2017 | Aug 6, 2016 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 6, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 6, 2016 | Jul 11, 2016 |
| Redhat_linux | — | Upgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-docUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-kdump-develUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-traceUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-bootwrapperUpgrade kernel-rt-trace-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-trace-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-kdumpUpgrade perfUpgrade kernelUpgrade kernel-abi-whitelistsUpgrade python-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-docUpgrade kernel-devel | Nov 3, 2016 | Aug 6, 2016 |
| Ubuntu | — | Upgrade linux-lts-xenialUpgrade linux-snapdragonUpgrade linux-lts-wilyUpgrade linuxUpgrade linux-raspi2 | Nov 19, 2024 | Aug 6, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 6, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub