Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-smpUpgrade kernel-xenU-develUpgrade kernel-smp-develUpgrade kernel-hugememUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-hugemem-develUpgrade kernel-xenUUpgrade kernel-xen-develUpgrade kernel-PAE-devel | Dec 1, 2016 | Nov 4, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 4, 2009 |
| Suse | — | Upgrade iscsitarget-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64Upgrade ext4dev-kmp-vmiUpgrade kernel-kdumpUpgrade kernel-xen-baseUpgrade kernel-vmi-baseUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-vmiUpgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade ext4dev-kmp-ppc64Upgrade kernel-pae-baseUpgrade kernel-default-manUpgrade ext4dev-kmp-paeUpgrade oracleasm-kmp-defaultUpgrade kernel-symsUpgrade kernel-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-default-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.28-17-versatileUpgrade usb-modules-2.6.24-26-sparc64-diUpgrade linux-image-2.6.27-16-virtualUpgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.24-26-virtualUpgrade linux-image-2.6.24-26-lpiacompatUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-26-powerpc-smpUpgrade linux-image-2.6.24-26-rtUpgrade linux-image-2.6.24-26-genericUpgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.24-26-sparc64Upgrade linux-image-2.6.24-26-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-26-mckinleyUpgrade linux-image-2.6.28-17-iop32xUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-26-lpiaUpgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.28-17-imx51Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.27-16-serverUpgrade linux-image-2.6.24-26-hppa64Upgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.28-17-genericUpgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.24-26-386Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.27-16-genericUpgrade linux-image-2.6.24-26-xenUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.28-17-virtualUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-26-powerpc64-smpUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-26-powerpcUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-26-hppa32Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-26-openvzUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.28-17-lpiaUpgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.24-26-itaniumUpgrade linux-image-2.6.24-26-sparc64-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.28-17-ixp4xxUpgrade linux-image-2.6.28-17-serverUpgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.31-16-virtual | Nov 8, 2024 | Nov 4, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Nov 4, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Nov 4, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub