The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmap_min_addr protection mechanism, or (3) defeat address space layout randomization (ASLR).
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-xenU-develUpgrade kernel-smp-develUpgrade kernel-xenUpgrade kernel-xenUUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-hugemem-develUpgrade kernel-PAE-develUpgrade kernel-develUpgrade kernelUpgrade kernel-smpUpgrade kernel-hugemem | Dec 1, 2016 | Jul 16, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 16, 2009 |
| Suse | — | Upgrade kernel-debug-extraUpgrade appleir-kmp-debugUpgrade acerhk-kmp-debugUpgrade intel-iamt-heci-kmp-debugUpgrade kernel-default-extraUpgrade ivtv-kmp-debugUpgrade oracleasm-kmp-traceUpgrade kernel-paeUpgrade drbd-kmp-debugUpgrade wlan-ng-kmp-debugUpgrade kernel-traceUpgrade kernel-symsUpgrade kernel-ppc64-extraUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade kernel-debugUpgrade vmware-kmp-traceUpgrade kernel-xenUpgrade uvcvideo-kmp-debugUpgrade kernel-ec2Upgrade tpctl-kmp-debugUpgrade kernel-xen-extraUpgrade kernel-debug-baseUpgrade acx-kmp-debugUpgrade virtualbox-ose-kmp-traceUpgrade dazuko-kmp-debugUpgrade kernel-vanillaUpgrade kernel-ppc64Upgrade at76_usb-kmp-debugUpgrade dazuko-kmp-traceUpgrade kernel-sourceUpgrade omnibook-kmp-debugUpgrade kernel-defaultUpgrade kqemu-kmp-traceUpgrade kernel-kdumpUpgrade vmware-kmp-debugUpgrade brocade-bfa-kmp-debugUpgrade kvm-kmp-traceUpgrade pcfclock-kmp-traceUpgrade ofed-kmp-traceUpgrade kernel-docsUpgrade aufs-kmp-traceUpgrade drbd-kmp-traceUpgrade kernel-pae-extraUpgrade oracleasm-kmp-debugUpgrade virtualbox-ose-kmp-debugUpgrade kernel-ec2-baseUpgrade kqemu-kmp-debugUpgrade iscsitarget-kmp-debugUpgrade kernel-trace-baseUpgrade kernel-ps3Upgrade nouveau-kmp-debugUpgrade lirc-kmp-traceUpgrade iscsitarget-kmp-traceUpgrade kernel-trace-extraUpgrade intel-iamt-heci-kmp-traceUpgrade aufs-kmp-debugUpgrade brocade-bfa-kmp-traceUpgrade pcfclock-kmp-debugUpgrade pcc-acpi-kmp-debugUpgrade ofed-kmp-debugUpgrade kernel-ppc64-baseUpgrade kernel-default-baseUpgrade gspcav-kmp-debugUpgrade kernel-ec2-extraUpgrade atl2-kmp-debug | Feb 17, 2015 | Jul 16, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.28-14-versatileUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.28-14-imx51Upgrade linux-image-2.6.28-14-iop32xUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.28-14-genericUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.28-14-virtualUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.28-14-lpiaUpgrade linux-image-2.6.28-14-ixp4xxUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.28-14-serverUpgrade linux-image-2.6.15-54-k7 | Nov 8, 2024 | Jul 16, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Jul 16, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Jul 16, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub