CVE-2006-5158

moderate-risk
Published 2006-10-05

The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (process crash) and deny access to NFS exports via unspecified vectors that trigger a kernel oops (null dereference) and a deadlock.

Do I need to act?

~
4.0% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (8)

Affected Vendors

Linux Canonical Redhat

References (30)

Mailing List http://marc.info/?l=linux-kernel&m=113476665626446&w=2
Mailing List http://marc.info/?l=linux-kernel&m=113494474208973&w=2
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2007-0488.html
Broken Link http://secunia.com/advisories/23361
Broken Link http://secunia.com/advisories/23384
Broken Link http://secunia.com/advisories/23752
Broken Link http://secunia.com/advisories/25838
Broken Link http://secunia.com/advisories/26289
Third Party Advisory http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm
Broken Link http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%...
Patch http://www.mandriva.com/security/advisories?name=MDKSA-2007:012
Broken Link http://www.novell.com/linux/security/advisories/2006_57_kernel.html
Broken Link http://www.securityfocus.com/bid/21581
Third Party Advisory http://www.ubuntu.com/usn/usn-395-1
Broken Link https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
Mailing List http://marc.info/?l=linux-kernel&m=113476665626446&w=2
Mailing List http://marc.info/?l=linux-kernel&m=113494474208973&w=2
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2007-0488.html
Broken Link http://secunia.com/advisories/23361
Broken Link http://secunia.com/advisories/23384
and 10 more references
47
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 7/34 · Low
Exposure 14/34 · Moderate