Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (BUG_ON and system crash) via a crafted mremap system call that expands a memory mapping.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel | Dec 1, 2016 | Jun 13, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 13, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 7, 2011 |
| Suse | — | Upgrade kernel-pae-develUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-trace-develUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-ppc64-develUpgrade kernel-ppc64Upgrade kernel-traceUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-pae-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-36-ia64Upgrade linux-image-2.6.35-31-serverUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.32-36-genericUpgrade linux-image-2.6.32-36-serverUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.35-31-generic-paeUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.35-31-powerpc64-smpUpgrade linux-image-2.6.32-36-sparc64-smpUpgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.32-36-powerpcUpgrade linux-image-2.6.35-31-omapUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-36-generic-paeUpgrade linux-image-2.6.32-340-ec2Upgrade linux-image-2.6.32-36-386Upgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.32-36-sparc64Upgrade linux-image-2.6.35-31-versatileUpgrade linux-image-2.6.32-36-powerpc64-smpUpgrade linux-image-2.6.32-36-powerpc-smpUpgrade linux-image-2.6.32-36-versatileUpgrade linux-image-2.6.32-36-preemptUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.35-31-powerpc-smpUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.35-31-virtualUpgrade linux-image-2.6.32-420-doveUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.35-31-powerpcUpgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.32-36-lpiaUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.35-31-genericUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.32-36-virtual | Nov 8, 2024 | Jun 13, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.0 to build number 787047Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Jun 13, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub