The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-largesmpUpgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-xenUUpgrade kernel-largesmp-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-smpUpgrade kernel-xenUpgrade kernel-smp-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-docUpgrade kernel-xenU-devel | Dec 1, 2016 | Aug 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 14, 2009 |
| Suse | — | Upgrade ext4dev-kmp-xenUpgrade kernel-sourceUpgrade kernel-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-vmiUpgrade kernel-kdumpUpgrade kernel-xenUpgrade ext4dev-kmp-vmiUpgrade ext4dev-kmp-paeUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade ext4dev-kmp-ppc64Upgrade oracleasm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-pae-baseUpgrade kernel-ppc64Upgrade kernel-default-baseUpgrade iscsitarget-kmp-defaultUpgrade kernel-vmi-baseUpgrade kernel-ppc64-baseUpgrade kernel-default-man | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.28-15-ixp4xxUpgrade linux-image-2.6.28-15-serverUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.28-15-virtualUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.28-15-iop32xUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.28-15-genericUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.28-15-imx51Upgrade linux-image-2.6.28-15-versatileUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.28-15-lpiaUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.24-24-powerpc-smp | Nov 8, 2024 | Aug 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 14, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 14, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub