The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.5.3 does not check whether a slot is a leaf, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and out-of-bounds read) via an application that uses associative-array data structures, as demonstrated by the keyutils test suite.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 16, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade perfUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Nov 30, 2017 | Nov 16, 2016 |
| Redhat_linux | — | Upgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debugNo solution existsUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-abi-whitelistsUpgrade kernel-kdump-develUpgrade kernel-docUpgrade kernel-debuginfo-common-ppc64Upgrade perfUpgrade kernel-bootwrapperUpgrade kernel-kdumpUpgrade kernel-debug-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo | Dec 22, 2016 | Nov 3, 2016 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-extra | Dec 9, 2016 | Nov 16, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-129-powerpc-e500mcUpgrade linux-image-3.13.0-129-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-129-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-129-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-129-powerpc-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-genericUpgrade linux-image-3.13.0-129-powerpc-e500Upgrade linux-image-3.13.0-129-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-129-generic-lpae | Aug 29, 2017 | Nov 16, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub