Denial Of Service (DoS)

2020-04-1000:36:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

10.1%

JSON

The kernel package is vulnerable to Denial of Service (DoS). A NULL pointer dereference flaw was found in the Multiple Devices (md) driver in the Linux kernel. If the “suspend_lo” or “suspend_hi” file on the sysfs file system (“/sys/”) is modified when the disk array is inactive, it could lead to a local denial of service or privilege escalation.

CPENameOperatorVersion
kerneleq2.6.18__8.1.14.el5
kerneleq2.6.18__92.1.17.el5
kerneleq2.6.18__128.1.14.el5
kerneleq2.6.18__164.el5
kerneleq2.6.18__92.1.22.el5
kerneleq2.6.18__8.1.8.el5
kerneleq2.6.18__53.1.4.el5
kerneleq2.6.18__8.1.3.lspp.81.el5
kerneleq2.6.18__8.1.4.el5
kerneleq2.6.18__128.1.6.el5

Name	Operator	Version
kernel	eq	2.6.18__8.1.14.el5
kernel	eq	2.6.18__92.1.17.el5
kernel	eq	2.6.18__128.1.14.el5
kernel	eq	2.6.18__164.el5
kernel	eq	2.6.18__92.1.22.el5
kernel	eq	2.6.18__8.1.8.el5
kernel	eq	2.6.18__53.1.4.el5
kernel	eq	2.6.18__8.1.3.lspp.81.el5
kernel	eq	2.6.18__8.1.4.el5
kernel	eq	2.6.18__128.1.6.el5