The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-firmwareUpgrade kernel-abi-whitelistsUpgrade kernel-debug-develUpgrade perfUpgrade kernel-PAEUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-doc | Dec 1, 2016 | Mar 16, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 16, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 8, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 16, 2015 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-ec2-extra | Dec 18, 2015 | Mar 16, 2015 |
| Ubuntu | — | Upgrade linux-image-3.2.0-79-genericUpgrade linux-image-3.2.0-79-powerpc-smpUpgrade linux-image-3.13.0-48-powerpc64-smpUpgrade linux-image-3.13.0-48-powerpc64-embUpgrade linux-image-3.2.0-79-omapUpgrade linux-image-3.2.0-79-virtualUpgrade linux-image-3.2.0-79-highbankUpgrade linux-image-3.13.0-48-genericUpgrade linux-image-3.2.0-79-generic-paeUpgrade linux-image-3.13.0-48-powerpc-smpUpgrade linux-image-3.2.0-79-powerpc64-smpUpgrade linux-image-3.13.0-48-lowlatencyUpgrade linux-image-3.13.0-48-generic-lpaeUpgrade linux-image-3.13.0-48-powerpc-e500Upgrade linux-image-3.2.0-1461-omap4Upgrade linux-image-3.13.0-48-powerpc-e500mc | Nov 8, 2024 | Mar 16, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub