fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-debuginfoUpgrade kernel-headersUpgrade kernel-PAE-debuginfoUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-debuginfo-commonUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-debug-debuginfo | Dec 1, 2016 | Jan 26, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 26, 2009 |
| Suse | — | Upgrade kernel-pae-baseUpgrade acx-kmp-debugUpgrade kqemu-kmp-debugUpgrade kernel-xenUpgrade kernel-symsUpgrade kernel-sourceUpgrade tpctl-kmp-debugUpgrade dazuko-kmp-debugUpgrade uvcvideo-kmp-debugUpgrade ivtv-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade kernel-ps3Upgrade pcfclock-kmp-debugUpgrade kernel-vanillaUpgrade kernel-default-extraUpgrade aufs-kmp-debugUpgrade wlan-ng-kmp-debugUpgrade ib-bonding-kmp-rt_timingUpgrade ib-bonding-kmp-rt_bigsmpUpgrade acerhk-kmp-debugUpgrade kernel-debug-baseUpgrade ofed-docUpgrade ofed-kmp-rt_debugUpgrade kernel-ppc64Upgrade ofed-cxgb3-NIC-kmp-rtUpgrade kernel-xen-extraUpgrade kernel-ppc64-extraUpgrade kernel-pae-extraUpgrade kernel-rtUpgrade kernel-traceUpgrade slert-releaseUpgrade kernel-debugUpgrade ib-bonding-kmp-rt_debugUpgrade kernel-defaultUpgrade kernel-debug-extraUpgrade kernel-trace-baseUpgrade kernel-rt_bigsmpUpgrade gspcav-kmp-debugUpgrade virtualbox-ose-kmp-debugUpgrade kernel-xen-baseUpgrade pcc-acpi-kmp-debugUpgrade ofedUpgrade vmware-kmp-debugUpgrade kernel-paeUpgrade kernel-bigsmpUpgrade ofed-kmp-rtUpgrade omnibook-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade kernel-default-baseUpgrade ofed-kmp-rt_timingUpgrade kernel-xenpaeUpgrade kernel-docsUpgrade at76_usb-kmp-debugUpgrade kernel-kdumpUpgrade appleir-kmp-debugUpgrade ib-bonding-kmp-rtUpgrade drbd-kmp-debugUpgrade iscsitarget-kmp-debugUpgrade ofed-kmp-rt_bigsmpUpgrade atl2-kmp-debugUpgrade kernel-rt_debugUpgrade nouveau-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade kernel-rt_timingUpgrade kernel-trace-extraUpgrade kernel-ppc64-base | Feb 17, 2015 | Jan 26, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.22-16-itanium | Nov 8, 2024 | Jan 26, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Jan 26, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub