The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 12, 2008 |
| Suse | — | Upgrade kernel-bigsmpUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-rtUpgrade kernel-kdumpUpgrade kernel-ppc64Upgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-rt_debugUpgrade kernel-xenpaeUpgrade suse-releaseUpgrade kernel-defaultUpgrade kernel-syms | Feb 17, 2015 | Feb 12, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.22-14-sparc64-smpUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.22-14-lpiaUpgrade linux-image-2.6.22-14-powerpcUpgrade linux-image-2.6.22-14-rtUpgrade linux-image-2.6.22-14-cellUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.22-14-genericUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.22-14-386Upgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.22-14-hppa64Upgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.22-14-hppa32Upgrade linux-image-2.6.22-14-xenUpgrade linux-image-2.6.22-14-powerpc-smpUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.22-14-serverUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.22-14-powerpc64-smpUpgrade linux-image-2.6.22-14-umeUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.22-14-sparc64Upgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.22-14-lpiacompatUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.22-14-mckinleyUpgrade linux-image-2.6.22-14-virtualUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.22-14-itaniumUpgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.17-12-server-bigiron | Nov 8, 2024 | Feb 12, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub