The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Jan 27, 2012 |
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-docUpgrade kernel-firmwareUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-debugUpgrade python-perfUpgrade kernel-debug-devel | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2012 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-vanilla-baseUpgrade kernel-symsUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-xen-develUpgrade kernel-ppc64-develUpgrade kernel-ppc64Upgrade kernel-pae-develUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-trace-develUpgrade kernel-paeUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-pae-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-ppc64-baseUpgrade kernel-default-develUpgrade kernel-xen | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-15-serverUpgrade linux-image-3.0.0-15-powerpcUpgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-3.0.0-15-virtualUpgrade linux-image-3.0.0-15-omapUpgrade linux-image-3.0.0-1207-omap4Upgrade linux-image-3.0.0-15-genericUpgrade linux-image-3.0.0-15-powerpc-smp | Nov 8, 2024 | Jan 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub