The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade python-perfUpgrade kernel-tools-libs-develUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-whitelistsUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-debugUpgrade perfUpgrade kernel-firmwareUpgrade kernel-develUpgrade kernel-PAEUpgrade kernel-debug-devel | Dec 1, 2016 | Mar 16, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 16, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 8, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 16, 2015 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-ec2-devel | Dec 18, 2015 | Mar 16, 2015 |
| Ubuntu | — | Upgrade linux-image-3.2.0-79-powerpc64-smpUpgrade linux-image-3.2.0-79-highbankUpgrade linux-image-3.13.0-48-powerpc-smpUpgrade linux-image-3.2.0-79-generic-paeUpgrade linux-image-3.13.0-48-generic-lpaeUpgrade linux-image-3.13.0-48-powerpc-e500Upgrade linux-image-3.13.0-48-powerpc-e500mcUpgrade linux-image-3.13.0-48-lowlatencyUpgrade linux-image-3.13.0-48-genericUpgrade linux-image-3.2.0-1461-omap4Upgrade linux-image-3.2.0-79-virtualUpgrade linux-image-3.13.0-48-powerpc64-embUpgrade linux-image-3.13.0-48-powerpc64-smpUpgrade linux-image-3.2.0-79-omapUpgrade linux-image-3.2.0-79-genericUpgrade linux-image-3.2.0-79-powerpc-smp | Nov 8, 2024 | Mar 16, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub