Null pointer dereference

2013-04-2914:55:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

JSON

The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for write access to the (1) set_ftrace_pid or (2) set_graph_function file, and then making an lseek system call.

CPENameOperatorVersion
linux_kernelge3.5
linux_kernellt3.8.8
linux_kernelge3.3
linux_kernellt3.4.49
linux_kernelge3.1
linux_kernellt3.2.44
enterprise_linuxeq6.0
enterprise_mrgeq2.0
linux_enterprise_desktopeq11 sp3
linux_enterprise_high_availability_extensioneq11 sp3

Name	Operator	Version
linux_kernel	ge	3.5
linux_kernel	lt	3.8.8
linux_kernel	ge	3.3
linux_kernel	lt	3.4.49
linux_kernel	ge	3.1
linux_kernel	lt	3.2.44
enterprise_linux	eq	6.0
enterprise_mrg	eq	2.0
linux_enterprise_desktop	eq	11 sp3
linux_enterprise_high_availability_extension	eq	11 sp3