fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-xenUpgrade kernel-PAE-debuginfoUpgrade kernel-debuginfo-commonUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-xen-debuginfo | Dec 1, 2016 | Jan 26, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 26, 2009 |
| Suse | — | Upgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade kernel-debug-extraUpgrade appleir-kmp-debugUpgrade kernel-ppc64-baseUpgrade kernel-xenpaeUpgrade kernel-trace-baseUpgrade ofed-kmp-rtUpgrade kernel-docsUpgrade kernel-xen-baseUpgrade ib-bonding-kmp-rtUpgrade vmware-kmp-debugUpgrade at76_usb-kmp-debugUpgrade kernel-debugUpgrade kernel-bigsmpUpgrade ib-bonding-kmp-rt_debugUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade ofedUpgrade drbd-kmp-debugUpgrade kernel-rt_timingUpgrade kernel-kdumpUpgrade kernel-paeUpgrade kernel-rt_bigsmpUpgrade nouveau-kmp-debugUpgrade atl2-kmp-debugUpgrade pcc-acpi-kmp-debugUpgrade omnibook-kmp-debugUpgrade virtualbox-ose-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade ofed-kmp-rt_timingUpgrade iscsitarget-kmp-debugUpgrade ofed-kmp-rt_bigsmpUpgrade kernel-trace-extraUpgrade gspcav-kmp-debugUpgrade aufs-kmp-debugUpgrade dazuko-kmp-debugUpgrade kernel-ppc64-extraUpgrade kernel-debug-baseUpgrade ofed-docUpgrade kernel-default-extraUpgrade slert-releaseUpgrade uvcvideo-kmp-debugUpgrade kqemu-kmp-debugUpgrade kernel-traceUpgrade kernel-pae-extraUpgrade pcfclock-kmp-debugUpgrade kernel-xen-extraUpgrade kernel-vanillaUpgrade acx-kmp-debugUpgrade tpctl-kmp-debugUpgrade wlan-ng-kmp-debugUpgrade kernel-ppc64Upgrade kernel-ps3Upgrade kernel-symsUpgrade ofed-kmp-rt_debugUpgrade ivtv-kmp-debugUpgrade kernel-rtUpgrade ib-bonding-kmp-rt_bigsmpUpgrade kernel-sourceUpgrade kernel-xenUpgrade ib-bonding-kmp-rt_timingUpgrade kernel-pae-baseUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade acerhk-kmp-debug | Feb 17, 2015 | Jan 26, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.24-23-lpia | Nov 8, 2024 | Jan 26, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Jan 26, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub