The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-xen-devel | Dec 1, 2016 | Dec 6, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 6, 2010 |
| Suse | — | Upgrade ofed-kmp-defaultUpgrade ofed-kmp-ppc64Upgrade ofedUpgrade ofed-docUpgrade ofed-kmp-paeUpgrade ofed-develUpgrade ofed-kmp-trace | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.32-25-preemptUpgrade linux-image-2.6.35-22-versatileUpgrade linux-image-2.6.32-25-sparc64-smpUpgrade linux-image-2.6.35-22-generic-paeUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.32-25-virtualUpgrade linux-image-2.6.32-25-lpiaUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.35-22-omapUpgrade linux-image-2.6.32-25-genericUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.35-22-powerpcUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-25-generic-paeUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.32-25-powerpc-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.35-22-powerpc-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.35-22-powerpc64-smpUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.35-22-virtualUpgrade linux-image-2.6.32-25-versatileUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.35-22-genericUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.32-25-sparc64Upgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.32-25-386Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.35-22-serverUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.32-25-powerpcUpgrade linux-image-2.6.32-309-ec2Upgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.32-25-ia64Upgrade linux-image-2.6.32-25-serverUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.32-25-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-mckinley | Nov 8, 2024 | Dec 6, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Dec 6, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub