Total vulnerabilities in the database
kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 3.15 | 3.16.35 |
| linux / linux_kernel | 2.6.32 | 3.2.65 |
| linux / linux_kernel | 3.3 | 3.4.106 |
| linux / linux_kernel | 3.5 | 3.10.60 |
| linux / linux_kernel | 3.11 | 3.12.33 |
| linux / linux_kernel | 3.13 | 3.14.24 |
| linux / linux_kernel | 3.17 | 3.17.3 |
| opensuse / evergreen | 11.4 | 11.4.x |
| suse / suse_linux_enterprise_server | 11-sp2 | 11-sp2.x |