In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extra | May 23, 2023 | Feb 16, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 17, 2023 | Feb 16, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Feb 16, 2022 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Feb 16, 2022 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 17, 2023 | Feb 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub