The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-debugUpgrade kernel-xenU-develUpgrade kernel-xen-develUpgrade kernel-smp-develUpgrade kernel-smpUpgrade kernel-develUpgrade kernel-docUpgrade kernel-largesmpUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-largesmp-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-xenU | Dec 1, 2016 | Aug 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 14, 2009 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-ppc64-baseUpgrade ext4dev-kmp-ppc64Upgrade oracleasm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-ppc64Upgrade iscsitarget-kmp-defaultUpgrade kernel-vmi-baseUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade ext4dev-kmp-paeUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-vmiUpgrade kernel-xenUpgrade ext4dev-kmp-xenUpgrade kernel-paeUpgrade kernel-sourceUpgrade ext4dev-kmp-defaultUpgrade kernel-kdumpUpgrade ext4dev-kmp-vmi | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.28-15-genericUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.28-15-lpiaUpgrade linux-image-2.6.28-15-imx51Upgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.28-15-versatileUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.28-15-iop32xUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.28-15-serverUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.28-15-ixp4xxUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.28-15-virtual | Nov 8, 2024 | Aug 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 14, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 14, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub