SB2015081812 - Ubuntu update for linux, linux-source-2.6.15

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2015081812

SB2015081812 - Ubuntu update for linux, linux-source-2.6.15

Published: August 18, 2015 Updated: October 31, 2026

Security Bulletin ID SB2015081812
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Use of uninitialized resource (CVE-ID: CVE-2009-2692)

CWE-ID: CWE-908 - Use of Uninitialized Resource

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to execute arbitrary code.

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.


Remediation

Install update from vendor's website.

References