Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec. NOTE: this vulnerability exists because of a CVE-2012-6701 regression.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Aug 28, 2019 | May 2, 2016 |
| Debian | debian-upgrade-linux | Mar 4, 2016 | Mar 3, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-kernel | Jun 26, 2018 | May 2, 2016 |
| Redhat_linux | — | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Jun 20, 2018 | May 2, 2016 |
| Suse | — | suse-upgrade-bbswitchsuse-upgrade-bbswitch-debugsourcesuse-upgrade-bbswitch-kmp-defaultsuse-upgrade-bbswitch-kmp-default-debuginfosuse-upgrade-bbswitch-kmp-desktopsuse-upgrade-bbswitch-kmp-desktop-debuginfosuse-upgrade-bbswitch-kmp-paesuse-upgrade-bbswitch-kmp-pae-debuginfosuse-upgrade-bbswitch-kmp-xensuse-upgrade-bbswitch-kmp-xen-debuginfosuse-upgrade-cloopsuse-upgrade-cloop-debuginfosuse-upgrade-cloop-debugsourcesuse-upgrade-cloop-kmp-defaultsuse-upgrade-cloop-kmp-default-debuginfosuse-upgrade-cloop-kmp-desktopsuse-upgrade-cloop-kmp-desktop-debuginfosuse-upgrade-cloop-kmp-paesuse-upgrade-cloop-kmp-pae-debuginfosuse-upgrade-cloop-kmp-xensuse-upgrade-cloop-kmp-xen-debuginfosuse-upgrade-crashsuse-upgrade-crash-debuginfosuse-upgrade-crash-debugsourcesuse-upgrade-crash-develsuse-upgrade-crash-docsuse-upgrade-crash-eppicsuse-upgrade-crash-eppic-debuginfosuse-upgrade-crash-gcoresuse-upgrade-crash-gcore-debuginfosuse-upgrade-crash-kmp-defaultsuse-upgrade-crash-kmp-default-debuginfosuse-upgrade-crash-kmp-desktopsuse-upgrade-crash-kmp-desktop-debuginfosuse-upgrade-crash-kmp-paesuse-upgrade-crash-kmp-pae-debuginfosuse-upgrade-crash-kmp-xensuse-upgrade-crash-kmp-xen-debuginfosuse-upgrade-hdjmodsuse-upgrade-hdjmod-debugsourcesuse-upgrade-hdjmod-kmp-defaultsuse-upgrade-hdjmod-kmp-default-debuginfosuse-upgrade-hdjmod-kmp-desktopsuse-upgrade-hdjmod-kmp-desktop-debuginfosuse-upgrade-hdjmod-kmp-paesuse-upgrade-hdjmod-kmp-pae-debuginfosuse-upgrade-hdjmod-kmp-xensuse-upgrade-hdjmod-kmp-xen-debuginfosuse-upgrade-ipsetsuse-upgrade-ipset-debuginfosuse-upgrade-ipset-debugsourcesuse-upgrade-ipset-develsuse-upgrade-ipset-kmp-defaultsuse-upgrade-ipset-kmp-default-debuginfosuse-upgrade-ipset-kmp-desktopsuse-upgrade-ipset-kmp-desktop-debuginfosuse-upgrade-ipset-kmp-paesuse-upgrade-ipset-kmp-pae-debuginfosuse-upgrade-ipset-kmp-xensuse-upgrade-ipset-kmp-xen-debuginfosuse-upgrade-kernel-debugsuse-upgrade-kernel-debug-basesuse-upgrade-kernel-debug-base-debuginfosuse-upgrade-kernel-debug-debuginfosuse-upgrade-kernel-debug-debugsourcesuse-upgrade-kernel-debug-develsuse-upgrade-kernel-debug-devel-debuginfosuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-basesuse-upgrade-kernel-default-base-debuginfosuse-upgrade-kernel-default-debuginfosuse-upgrade-kernel-default-debugsourcesuse-upgrade-kernel-default-develsuse-upgrade-kernel-desktopsuse-upgrade-kernel-desktop-basesuse-upgrade-kernel-desktop-base-debuginfosuse-upgrade-kernel-desktop-debuginfosuse-upgrade-kernel-desktop-debugsourcesuse-upgrade-kernel-desktop-develsuse-upgrade-kernel-develsuse-upgrade-kernel-docssuse-upgrade-kernel-ec2suse-upgrade-kernel-ec2-basesuse-upgrade-kernel-ec2-base-debuginfosuse-upgrade-kernel-ec2-debuginfosuse-upgrade-kernel-ec2-debugsourcesuse-upgrade-kernel-ec2-develsuse-upgrade-kernel-macrossuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-obs-build-debugsourcesuse-upgrade-kernel-obs-qasuse-upgrade-kernel-obs-qa-xensuse-upgrade-kernel-paesuse-upgrade-kernel-pae-basesuse-upgrade-kernel-pae-base-debuginfosuse-upgrade-kernel-pae-debuginfosuse-upgrade-kernel-pae-debugsourcesuse-upgrade-kernel-pae-develsuse-upgrade-kernel-sourcesuse-upgrade-kernel-source-vanillasuse-upgrade-kernel-symssuse-upgrade-kernel-vanillasuse-upgrade-kernel-vanilla-debuginfosuse-upgrade-kernel-vanilla-debugsourcesuse-upgrade-kernel-vanilla-develsuse-upgrade-kernel-xensuse-upgrade-kernel-xen-basesuse-upgrade-kernel-xen-base-debuginfosuse-upgrade-kernel-xen-debuginfosuse-upgrade-kernel-xen-debugsourcesuse-upgrade-kernel-xen-develsuse-upgrade-libipset3suse-upgrade-libipset3-debuginfosuse-upgrade-pcfclocksuse-upgrade-pcfclock-debuginfosuse-upgrade-pcfclock-debugsourcesuse-upgrade-pcfclock-kmp-defaultsuse-upgrade-pcfclock-kmp-default-debuginfosuse-upgrade-pcfclock-kmp-desktopsuse-upgrade-pcfclock-kmp-desktop-debuginfosuse-upgrade-pcfclock-kmp-paesuse-upgrade-pcfclock-kmp-pae-debuginfosuse-upgrade-python-virtualboxsuse-upgrade-python-virtualbox-debuginfosuse-upgrade-vhba-kmpsuse-upgrade-vhba-kmp-debugsourcesuse-upgrade-vhba-kmp-defaultsuse-upgrade-vhba-kmp-default-debuginfosuse-upgrade-vhba-kmp-desktopsuse-upgrade-vhba-kmp-desktop-debuginfosuse-upgrade-vhba-kmp-paesuse-upgrade-vhba-kmp-pae-debuginfosuse-upgrade-vhba-kmp-xensuse-upgrade-vhba-kmp-xen-debuginfosuse-upgrade-virtualboxsuse-upgrade-virtualbox-debuginfosuse-upgrade-virtualbox-debugsourcesuse-upgrade-virtualbox-develsuse-upgrade-virtualbox-guest-desktop-iconssuse-upgrade-virtualbox-guest-kmp-defaultsuse-upgrade-virtualbox-guest-kmp-default-debuginfosuse-upgrade-virtualbox-guest-kmp-desktopsuse-upgrade-virtualbox-guest-kmp-desktop-debuginfosuse-upgrade-virtualbox-guest-kmp-paesuse-upgrade-virtualbox-guest-kmp-pae-debuginfosuse-upgrade-virtualbox-guest-toolssuse-upgrade-virtualbox-guest-tools-debuginfosuse-upgrade-virtualbox-guest-x11suse-upgrade-virtualbox-guest-x11-debuginfosuse-upgrade-virtualbox-host-kmp-defaultsuse-upgrade-virtualbox-host-kmp-default-debuginfosuse-upgrade-virtualbox-host-kmp-desktopsuse-upgrade-virtualbox-host-kmp-desktop-debuginfosuse-upgrade-virtualbox-host-kmp-paesuse-upgrade-virtualbox-host-kmp-pae-debuginfosuse-upgrade-virtualbox-host-sourcesuse-upgrade-virtualbox-qtsuse-upgrade-virtualbox-qt-debuginfosuse-upgrade-virtualbox-websrvsuse-upgrade-virtualbox-websrv-debuginfosuse-upgrade-xensuse-upgrade-xen-debugsourcesuse-upgrade-xen-develsuse-upgrade-xen-doc-htmlsuse-upgrade-xen-kmp-defaultsuse-upgrade-xen-kmp-default-debuginfosuse-upgrade-xen-kmp-desktopsuse-upgrade-xen-kmp-desktop-debuginfosuse-upgrade-xen-libssuse-upgrade-xen-libs-32bitsuse-upgrade-xen-libs-debuginfosuse-upgrade-xen-libs-debuginfo-32bitsuse-upgrade-xen-toolssuse-upgrade-xen-tools-debuginfosuse-upgrade-xen-tools-domususe-upgrade-xen-tools-domu-debuginfosuse-upgrade-xtables-addonssuse-upgrade-xtables-addons-debuginfosuse-upgrade-xtables-addons-debugsourcesuse-upgrade-xtables-addons-kmp-defaultsuse-upgrade-xtables-addons-kmp-default-debuginfosuse-upgrade-xtables-addons-kmp-desktopsuse-upgrade-xtables-addons-kmp-desktop-debuginfosuse-upgrade-xtables-addons-kmp-paesuse-upgrade-xtables-addons-kmp-pae-debuginfosuse-upgrade-xtables-addons-kmp-xensuse-upgrade-xtables-addons-kmp-xen-debuginfo | Aug 26, 2016 | May 2, 2016 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-86-genericubuntu-upgrade-linux-image-3-13-0-86-generic-lpaeubuntu-upgrade-linux-image-3-13-0-86-lowlatencyubuntu-upgrade-linux-image-3-13-0-86-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-86-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-86-powerpc-smpubuntu-upgrade-linux-image-3-13-0-86-powerpc64-embubuntu-upgrade-linux-image-3-13-0-86-powerpc64-smpubuntu-upgrade-linux-image-3-16-0-71-genericubuntu-upgrade-linux-image-3-16-0-71-generic-lpaeubuntu-upgrade-linux-image-3-16-0-71-lowlatencyubuntu-upgrade-linux-image-3-16-0-71-powerpc-e500mcubuntu-upgrade-linux-image-3-16-0-71-powerpc-smpubuntu-upgrade-linux-image-3-16-0-71-powerpc64-embubuntu-upgrade-linux-image-3-16-0-71-powerpc64-smpubuntu-upgrade-linux-image-3-19-0-59-genericubuntu-upgrade-linux-image-3-19-0-59-generic-lpaeubuntu-upgrade-linux-image-3-19-0-59-lowlatencyubuntu-upgrade-linux-image-3-19-0-59-powerpc-e500mcubuntu-upgrade-linux-image-3-19-0-59-powerpc-smpubuntu-upgrade-linux-image-3-19-0-59-powerpc64-embubuntu-upgrade-linux-image-3-19-0-59-powerpc64-smp | May 9, 2016 | May 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub