The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-xenUUpgrade kernel-largesmpUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-largesmp-develUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-smpUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-xenU-develUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-smp-devel | Dec 1, 2016 | Aug 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 14, 2009 |
| Suse | — | Upgrade iscsitarget-kmp-defaultUpgrade ext4dev-kmp-ppc64Upgrade kernel-vmi-baseUpgrade kernel-symsUpgrade oracleasm-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-default-manUpgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade kernel-pae-baseUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade ext4dev-kmp-paeUpgrade kernel-xenUpgrade kernel-sourceUpgrade ext4dev-kmp-xenUpgrade kernel-kdumpUpgrade kernel-paeUpgrade kernel-vmiUpgrade ext4dev-kmp-vmiUpgrade ext4dev-kmp-default | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.28-15-lpiaUpgrade linux-image-2.6.28-15-genericUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.28-15-versatileUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.28-15-imx51Upgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.28-15-iop32xUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.28-15-virtualUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.28-15-serverUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.28-15-ixp4xxUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.24-24-virtual | Nov 8, 2024 | Aug 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 14, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 14, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub