The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-largesmpUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-xenUUpgrade kernel-largesmp-develUpgrade kernelUpgrade kernel-smpUpgrade kernel-debugUpgrade kernel-xenU-develUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-smp-develUpgrade kernel-devel | Dec 1, 2016 | Aug 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 14, 2009 |
| Suse | — | Upgrade wlan-ng-kmp-debugUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade ofed-kmp-rt_bigsmpUpgrade kernel-pmac64Upgrade aufs-kmp-traceUpgrade vmware-kmp-traceUpgrade kernel-ec2-extraUpgrade kernel-umUpgrade kernel-trace-extraUpgrade drbd-kmp-debugUpgrade kernel-default-extraUpgrade kernel-s390Upgrade drbd-kmp-traceUpgrade kernel-iseries64Upgrade ofed-kmp-rt_timingUpgrade kernel-xenpaeUpgrade kernel-xen-baseUpgrade ofed-kmp-rt_debugUpgrade kernel-ppc64-baseUpgrade kernel-ec2-baseUpgrade um-host-install-initrdUpgrade kernel-ppc64-extraUpgrade pcfclock-kmp-traceUpgrade kernel-s390-debugUpgrade ib-bonding-kmp-rt_bigsmpUpgrade kernel-docsUpgrade ib-bonding-kmp-rt_timingUpgrade gspcav-kmp-debugUpgrade kernel-sn2Upgrade ib-bonding-kmp-rtUpgrade kernel-debugUpgrade kernel-symsUpgrade tpctl-kmp-debugUpgrade aufs-kmp-debugUpgrade vmware-kmp-debugUpgrade dazuko-kmp-traceUpgrade ofed-kmp-debugUpgrade pcfclock-kmp-debugUpgrade brocade-bfa-kmp-traceUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade ivtv-kmp-debugUpgrade um-host-kernelUpgrade kernel-rtUpgrade kernel-rt_bigsmpUpgrade kernel-pae-extraUpgrade uvcvideo-kmp-debugUpgrade kernel-pae-baseUpgrade oracleasm-kmp-debugUpgrade kernel-ppc64Upgrade nouveau-kmp-debugUpgrade intel-iamt-heci-kmp-debugUpgrade kernel-vanillaUpgrade virtualbox-ose-kmp-traceUpgrade appleir-kmp-debugUpgrade ofed-kmp-traceUpgrade brocade-bfa-kmp-debugUpgrade kernel-bigsmpUpgrade virtualbox-ose-kmp-debugUpgrade kernel-kdumpUpgrade oracleasm-kmp-traceUpgrade kernel-rt_debugUpgrade kernel-rt_timingUpgrade kernel-traceUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade kernel-debug-baseUpgrade kvm-kmp-traceUpgrade kernel-64k-pagesizeUpgrade acerhk-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade ofed-kmp-rtUpgrade kernel-xen-extraUpgrade kernel-sourceUpgrade kernel-trace-baseUpgrade ofed-docUpgrade kernel-ps3Upgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade iscsitarget-kmp-debugUpgrade ofedUpgrade intel-iamt-heci-kmp-traceUpgrade kernel-debug-extraUpgrade acx-kmp-debugUpgrade kernel-s390xUpgrade lirc-kmp-traceUpgrade kqemu-kmp-traceUpgrade kernel-ec2Upgrade kernel-smpUpgrade dazuko-kmp-debugUpgrade at76_usb-kmp-debugUpgrade kernel-pseries64Upgrade kqemu-kmp-debugUpgrade iscsitarget-kmp-traceUpgrade kernel-paeUpgrade kernel-s390x-debugUpgrade atl2-kmp-debugUpgrade pcc-acpi-kmp-debugUpgrade omnibook-kmp-debugUpgrade kernel-xenUpgrade slert-releaseUpgrade ib-bonding-kmp-rt_debug | Feb 17, 2015 | Aug 14, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.28-15-virtualUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.28-15-serverUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.28-15-iop32xUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.28-15-ixp4xxUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.28-15-lpiaUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.28-15-versatileUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.28-15-genericUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.28-15-imx51 | Nov 8, 2024 | Aug 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 14, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub