The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-smpUpgrade kernel-smp-develUpgrade kernel-xenU-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-largesmp-develUpgrade kernelUpgrade kernel-xenUUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-largesmpUpgrade kernel-PAE | Dec 1, 2016 | Aug 14, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 14, 2009 |
| Suse | — | Upgrade slert-releaseUpgrade ofed-kmp-rtUpgrade iscsitarget-kmp-traceUpgrade kernel-paeUpgrade dazuko-kmp-debugUpgrade kvm-kmp-traceUpgrade kernel-debug-baseUpgrade kernel-64k-pagesizeUpgrade kernel-trace-baseUpgrade oracleasm-kmp-traceUpgrade ofedUpgrade pcc-acpi-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade kernel-smpUpgrade iscsitarget-kmp-debugUpgrade acerhk-kmp-debugUpgrade acx-kmp-debugUpgrade omnibook-kmp-debugUpgrade kernel-xenUpgrade kernel-pseries64Upgrade kernel-ec2Upgrade kernel-traceUpgrade kqemu-kmp-traceUpgrade kernel-s390xUpgrade at76_usb-kmp-debugUpgrade kernel-rt_timingUpgrade kernel-kdumpUpgrade atl2-kmp-debugUpgrade kernel-debug-extraUpgrade ofed-docUpgrade kernel-ps3Upgrade virtualbox-ose-kmp-debugUpgrade kernel-bigsmpUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade kqemu-kmp-debugUpgrade ib-bonding-kmp-rt_debugUpgrade lirc-kmp-traceUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-s390x-debugUpgrade kernel-xen-extraUpgrade intel-iamt-heci-kmp-traceUpgrade kernel-s390-debugUpgrade kernel-sn2Upgrade nouveau-kmp-debugUpgrade kernel-trace-extraUpgrade kernel-pmac64Upgrade um-host-kernelUpgrade gspcav-kmp-debugUpgrade vmware-kmp-traceUpgrade drbd-kmp-traceUpgrade kernel-debugUpgrade ofed-kmp-rt_bigsmpUpgrade kernel-rt_bigsmpUpgrade kernel-pae-extraUpgrade vmware-kmp-debugUpgrade wlan-ng-kmp-debugUpgrade kernel-symsUpgrade tpctl-kmp-debugUpgrade kernel-xenpaeUpgrade ib-bonding-kmp-rt_timingUpgrade ofed-kmp-rt_debugUpgrade aufs-kmp-debugUpgrade kernel-rtUpgrade kernel-ec2-baseUpgrade intel-iamt-heci-kmp-debugUpgrade kernel-ppc64Upgrade ofed-kmp-debugUpgrade ivtv-kmp-debugUpgrade kernel-default-baseUpgrade pcfclock-kmp-traceUpgrade dazuko-kmp-traceUpgrade brocade-bfa-kmp-traceUpgrade kernel-vanillaUpgrade virtualbox-ose-kmp-traceUpgrade oracleasm-kmp-debugUpgrade ofed-kmp-traceUpgrade kernel-pae-baseUpgrade kernel-ec2-extraUpgrade aufs-kmp-traceUpgrade ib-bonding-kmp-rtUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-umUpgrade ib-bonding-kmp-rt_bigsmpUpgrade kernel-default-extraUpgrade kernel-ppc64-baseUpgrade brocade-bfa-kmp-debugUpgrade pcfclock-kmp-debugUpgrade ofed-kmp-rt_timingUpgrade kernel-ppc64-extraUpgrade drbd-kmp-debugUpgrade kernel-xen-baseUpgrade kernel-iseries64Upgrade uvcvideo-kmp-debugUpgrade appleir-kmp-debugUpgrade um-host-install-initrdUpgrade kernel-s390Upgrade ofed-cxgb3-NIC-kmp-rt_bigsmp | Feb 17, 2015 | Aug 14, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.28-15-versatileUpgrade linux-image-2.6.28-15-imx51Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.28-15-lpiaUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.28-15-genericUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.28-15-iop32xUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.28-15-ixp4xxUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.28-15-virtualUpgrade linux-image-2.6.28-15-serverUpgrade linux-image-2.6.15-54-server-bigiron | Nov 8, 2024 | Aug 14, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 14, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub