The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-hugemem-develUpgrade kernelUpgrade kernel-develUpgrade kernel-docUpgrade kernel-xenUUpgrade kernel-xenU-develUpgrade kernel-smp-develUpgrade kernel-hugememUpgrade kernel-smp | Dec 1, 2016 | Sep 18, 2009 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-smpUpgrade kernel-xenUpgrade kernel-symsUpgrade um-host-kernelUpgrade kernel-iseries64Upgrade kernel-pmac64Upgrade kernel-64k-pagesizeUpgrade kernel-pseries64Upgrade kernel-s390x-debugUpgrade kernel-debugUpgrade um-host-install-initrdUpgrade kernel-defaultUpgrade kernel-s390xUpgrade kernel-s390Upgrade kernel-sn2Upgrade xen-kmpUpgrade kernel-s390-debugUpgrade kernel-umUpgrade kernel-xenpaeUpgrade kernel-bigsmp | Feb 17, 2015 | Sep 18, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-25-sparc64-smp | Nov 8, 2024 | Sep 18, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub