The do_task_stat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the start_code and end_code fields in the /proc/#####/stat file for a process executing a PIE binary.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-develUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-xen | Dec 1, 2016 | Jul 18, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 18, 2011 |
| Suse | — | Upgrade kernel-iseries64Upgrade kernel-xenUpgrade kernel-debugUpgrade kernel-vmipaeUpgrade kernel-kdumpUpgrade kernel-kdumppaeUpgrade kernel-bigsmpUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-smpUpgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-vmi | Feb 17, 2015 | Jul 18, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-sparc64 | Nov 8, 2024 | Jul 18, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Jul 18, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub