The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capability, which allows local users to bypass intended access restrictions via a crafted ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Nov 12, 2013 |
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-firmwareUpgrade kernel-debugUpgrade kernel-develUpgrade perfUpgrade kernel-xenUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-abi-whitelistsUpgrade python-perf | Dec 1, 2016 | Nov 26, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 27, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Nov 27, 2013 |
| Suse | — | Upgrade kernel-kdumpUpgrade kernel-pae-baseUpgrade kernel-ec2-develUpgrade gfs2-kmp-ppc64Upgrade cluster-network-kmp-rt_traceUpgrade kernel-defaultUpgrade kernel-rtUpgrade gfs2-kmp-traceUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-trace-extraUpgrade ext4dev-kmp-defaultUpgrade kernel-symsUpgrade ofed-kmp-rt_traceUpgrade kernel-default-extraUpgrade xen-kmp-paeUpgrade btrfs-kmp-defaultUpgrade kernel-rt_trace-develUpgrade cluster-network-kmp-defaultUpgrade kernel-xen-baseUpgrade kernel-ppc64Upgrade kernel-syms-rtUpgrade kernel-xen-develUpgrade kernel-ec2-baseUpgrade ext4dev-kmp-traceUpgrade kernel-ppc64-baseUpgrade cluster-network-kmp-rtUpgrade gfs2-kmp-bigsmpUpgrade cluster-network-kmp-xenUpgrade iscsitarget-kmp-rtUpgrade ocfs2-kmp-bigsmpUpgrade iscsitarget-kmp-rt_traceUpgrade cluster-network-kmp-bigsmpUpgrade kernel-rt_trace-baseUpgrade kernel-smpUpgrade kernel-kdumppaeUpgrade hyper-v-kmp-traceUpgrade ocfs2-kmp-traceUpgrade ocfs2-kmp-ppc64Upgrade kernel-xenpaeUpgrade kernel-pae-extraUpgrade kernel-ppc64-develUpgrade kernel-rt-develUpgrade kernel-vmipaeUpgrade kernel-default-baseUpgrade cluster-network-kmp-ppc64Upgrade kernel-paeUpgrade kernel-trace-develUpgrade drbd-kmp-rt_traceUpgrade kernel-xen-extraUpgrade ocfs2-kmp-xenUpgrade xen-kmp-defaultUpgrade kernel-trace-baseUpgrade lttng-modules-kmp-rtUpgrade kernel-xenUpgrade cluster-network-kmp-paeUpgrade kernel-default-manUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade xen-kmp-traceUpgrade drbd-kmp-rtUpgrade kernel-rt-baseUpgrade sle-hae-releaseUpgrade kernel-pae-develUpgrade kernel-default-develUpgrade ofed-kmp-rtUpgrade kernel-bigsmpUpgrade kernel-vmiUpgrade hyper-v-kmp-paeUpgrade lttng-modules-kmp-rt_traceUpgrade btrfs-kmp-paeUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-paeUpgrade ext4dev-kmp-paeUpgrade kernel-traceUpgrade ocfs2-kmp-rt_traceUpgrade btrfs-kmp-xenUpgrade ocfs2-kmp-paeUpgrade kernel-bigsmp-baseUpgrade ext4dev-kmp-xenUpgrade kernel-ec2Upgrade kernel-sourceUpgrade kernel-rt_traceUpgrade hyper-v-kmp-defaultUpgrade cluster-network-kmp-traceUpgrade kernel-debugUpgrade gfs2-kmp-xenUpgrade kernel-bigsmp-develUpgrade kernel-source-rt | Jan 31, 2014 | Nov 26, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-56-sparc64Upgrade linux-image-3.2.0-58-generic-paeUpgrade linux-image-2.6.32-56-serverUpgrade linux-image-3.5.0-45-powerpc-smpUpgrade linux-image-3.5.0-45-powerpc64-smpUpgrade linux-image-3.11.0-15-generic-lpaeUpgrade linux-image-3.5.0-45-highbankUpgrade linux-image-3.2.0-58-virtualUpgrade linux-image-3.5.0-45-omapUpgrade linux-image-2.6.32-56-powerpc64-smpUpgrade linux-image-2.6.32-56-ia64Upgrade linux-image-2.6.32-361-ec2Upgrade linux-image-3.2.0-58-omapUpgrade linux-image-2.6.32-56-386Upgrade linux-image-2.6.32-56-virtualUpgrade linux-image-2.6.32-56-preemptUpgrade linux-image-3.8.0-35-genericUpgrade linux-image-3.2.0-58-powerpc64-smpUpgrade linux-image-2.6.32-56-versatileUpgrade linux-image-3.2.0-58-powerpc-smpUpgrade linux-image-2.6.32-56-genericUpgrade linux-image-3.2.0-1442-omap4Upgrade linux-image-3.11.0-15-genericUpgrade linux-image-2.6.32-56-powerpc-smpUpgrade linux-image-3.2.0-58-highbankUpgrade linux-image-2.6.32-56-sparc64-smpUpgrade linux-image-2.6.32-56-powerpcUpgrade linux-image-3.2.0-58-genericUpgrade linux-image-3.5.0-45-genericUpgrade linux-image-3.5.0-237-omap4Upgrade linux-image-2.6.32-56-lpiaUpgrade linux-image-2.6.32-56-generic-pae | Nov 8, 2024 | Nov 27, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub