The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.
Software | From | Fixed in |
---|---|---|
linux / linux_kernel | 2.2.0 | 2.2.0.x |
linux / linux_kernel | 2.2.1 | 2.2.1.x |
linux / linux_kernel | 2.2.10 | 2.2.10.x |
linux / linux_kernel | 2.2.11 | 2.2.11.x |
linux / linux_kernel | 2.2.12 | 2.2.12.x |
linux / linux_kernel | 2.2.13 | 2.2.13.x |
linux / linux_kernel | 2.2.14 | 2.2.14.x |
linux / linux_kernel | 2.2.15 | 2.2.15.x |
linux / linux_kernel | 2.2.15_pre20 | 2.2.15_pre20.x |
linux / linux_kernel | 2.2.15-pre16 | 2.2.15-pre16.x |
linux / linux_kernel | 2.2.16 | 2.2.16.x |
linux / linux_kernel | 2.2.16-pre6 | 2.2.16-pre6.x |
linux / linux_kernel | 2.2.17 | 2.2.17.x |
linux / linux_kernel | 2.2.18 | 2.2.18.x |
linux / linux_kernel | 2.2.19 | 2.2.19.x |
linux / linux_kernel | 2.2.2 | 2.2.2.x |
linux / linux_kernel | 2.2.20 | 2.2.20.x |
linux / linux_kernel | 2.2.21 | 2.2.21.x |
linux / linux_kernel | 2.2.22 | 2.2.22.x |
linux / linux_kernel | 2.2.23 | 2.2.23.x |
linux / linux_kernel | 2.2.24 | 2.2.24.x |
linux / linux_kernel | 2.2.3 | 2.2.3.x |
linux / linux_kernel | 2.2.4 | 2.2.4.x |
linux / linux_kernel | 2.2.5 | 2.2.5.x |
linux / linux_kernel | 2.2.6 | 2.2.6.x |
linux / linux_kernel | 2.2.7 | 2.2.7.x |
linux / linux_kernel | 2.2.8 | 2.2.8.x |
linux / linux_kernel | 2.2.9 | 2.2.9.x |
linux / linux_kernel | 2.4.0 | 2.4.0.x |
linux / linux_kernel | 2.4.0-test1 | 2.4.0-test1.x |
linux / linux_kernel | 2.4.0-test10 | 2.4.0-test10.x |
linux / linux_kernel | 2.4.0-test11 | 2.4.0-test11.x |
linux / linux_kernel | 2.4.0-test12 | 2.4.0-test12.x |
linux / linux_kernel | 2.4.0-test2 | 2.4.0-test2.x |
linux / linux_kernel | 2.4.0-test3 | 2.4.0-test3.x |
linux / linux_kernel | 2.4.0-test4 | 2.4.0-test4.x |
linux / linux_kernel | 2.4.0-test5 | 2.4.0-test5.x |
linux / linux_kernel | 2.4.0-test6 | 2.4.0-test6.x |
linux / linux_kernel | 2.4.0-test7 | 2.4.0-test7.x |
linux / linux_kernel | 2.4.0-test8 | 2.4.0-test8.x |
linux / linux_kernel | 2.4.0-test9 | 2.4.0-test9.x |
linux / linux_kernel | 2.4.1 | 2.4.1.x |
linux / linux_kernel | 2.4.10 | 2.4.10.x |
linux / linux_kernel | 2.4.11 | 2.4.11.x |
linux / linux_kernel | 2.4.12 | 2.4.12.x |
linux / linux_kernel | 2.4.13 | 2.4.13.x |
linux / linux_kernel | 2.4.14 | 2.4.14.x |
linux / linux_kernel | 2.4.15 | 2.4.15.x |
linux / linux_kernel | 2.4.16 | 2.4.16.x |
linux / linux_kernel | 2.4.17 | 2.4.17.x |
linux / linux_kernel | 2.4.18 | 2.4.18.x |
linux / linux_kernel | 2.4.18-pre1 | 2.4.18-pre1.x |
linux / linux_kernel | 2.4.18-pre2 | 2.4.18-pre2.x |
linux / linux_kernel | 2.4.18-pre3 | 2.4.18-pre3.x |
linux / linux_kernel | 2.4.18-pre4 | 2.4.18-pre4.x |
linux / linux_kernel | 2.4.18-pre5 | 2.4.18-pre5.x |
linux / linux_kernel | 2.4.18-pre6 | 2.4.18-pre6.x |
linux / linux_kernel | 2.4.18-pre7 | 2.4.18-pre7.x |
linux / linux_kernel | 2.4.18-pre8 | 2.4.18-pre8.x |
linux / linux_kernel | 2.4.19 | 2.4.19.x |
linux / linux_kernel | 2.4.19-pre1 | 2.4.19-pre1.x |
linux / linux_kernel | 2.4.19-pre2 | 2.4.19-pre2.x |
linux / linux_kernel | 2.4.19-pre3 | 2.4.19-pre3.x |
linux / linux_kernel | 2.4.19-pre4 | 2.4.19-pre4.x |
linux / linux_kernel | 2.4.19-pre5 | 2.4.19-pre5.x |
linux / linux_kernel | 2.4.19-pre6 | 2.4.19-pre6.x |
linux / linux_kernel | 2.4.2 | 2.4.2.x |
linux / linux_kernel | 2.4.20 | 2.4.20.x |
linux / linux_kernel | 2.4.21 | 2.4.21.x |
linux / linux_kernel | 2.4.21-pre1 | 2.4.21-pre1.x |
linux / linux_kernel | 2.4.21-pre4 | 2.4.21-pre4.x |
linux / linux_kernel | 2.4.21-pre7 | 2.4.21-pre7.x |
linux / linux_kernel | 2.4.22 | 2.4.22.x |
linux / linux_kernel | 2.4.23 | 2.4.23.x |
linux / linux_kernel | 2.4.23-pre9 | 2.4.23-pre9.x |
linux / linux_kernel | 2.4.24 | 2.4.24.x |
linux / linux_kernel | 2.4.3 | 2.4.3.x |
linux / linux_kernel | 2.4.4 | 2.4.4.x |
linux / linux_kernel | 2.4.5 | 2.4.5.x |
linux / linux_kernel | 2.4.6 | 2.4.6.x |
linux / linux_kernel | 2.4.7 | 2.4.7.x |
linux / linux_kernel | 2.4.8 | 2.4.8.x |
linux / linux_kernel | 2.4.9 | 2.4.9.x |
linux / linux_kernel | 2.6_test9_cvs | 2.6_test9_cvs.x |
linux / linux_kernel | 2.6.0 | 2.6.0.x |
linux / linux_kernel | 2.6.0-test1 | 2.6.0-test1.x |
linux / linux_kernel | 2.6.0-test10 | 2.6.0-test10.x |
linux / linux_kernel | 2.6.0-test11 | 2.6.0-test11.x |
linux / linux_kernel | 2.6.0-test2 | 2.6.0-test2.x |
linux / linux_kernel | 2.6.0-test3 | 2.6.0-test3.x |
linux / linux_kernel | 2.6.0-test4 | 2.6.0-test4.x |
linux / linux_kernel | 2.6.0-test5 | 2.6.0-test5.x |
linux / linux_kernel | 2.6.0-test6 | 2.6.0-test6.x |
linux / linux_kernel | 2.6.0-test7 | 2.6.0-test7.x |
linux / linux_kernel | 2.6.0-test8 | 2.6.0-test8.x |
linux / linux_kernel | 2.6.0-test9 | 2.6.0-test9.x |
linux / linux_kernel | 2.6.1-rc1 | 2.6.1-rc1.x |
linux / linux_kernel | 2.6.1-rc2 | 2.6.1-rc2.x |
linux / linux_kernel | 2.6.2 | 2.6.2.x |
trustix / secure_linux | 1.5 | 1.5.x |
trustix / secure_linux | 2.0 | 2.0.x |
redhat / kernel | 2.4.20-8 | 2.4.20-8.x |
redhat / kernel_doc | 2.4.20-8 | 2.4.20-8.x |
redhat / bigmem_kernel | 2.4.20-8 | 2.4.20-8.x |
redhat / kernel_source | 2.4.20-8 | 2.4.20-8.x |
netwosix / netwosix_linux | 1.0 | 1.0.x |