PT-2010-1040 · Linux+2 · Linux Kernel+2
CVSS v2.0
7.2
Alta
| Vetor | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
drbd-kmp-default versions (affected versions not specified)
Linux kernel versions prior to 2.6.36-rc4
Description
The issue concerns multiple vulnerabilities in the drbd-kmp-default package of the openSUSE operating system, which can be exploited locally to compromise the confidentiality, integrity, and availability of protected information. Additionally, a double free vulnerability exists in the
snd seq oss open function of the Linux kernel, potentially allowing local users to cause a denial of service or have other unspecified impacts by attempting to open the /dev/sequencer device.Recommendations
For drbd-kmp-default, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Linux kernel versions prior to 2.6.36-rc4, update to version 2.6.36-rc4 or later to resolve the issue. As a temporary workaround, consider restricting access to the /dev/sequencer device to minimize the risk of exploitation.
DoS
Double Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat
Drbd-Kmp-Default