The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernelUpgrade kernel-devel | Dec 1, 2016 | Feb 28, 2011 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 28, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 7, 2011 |
| Suse | — | Upgrade kernel-vanilla-baseUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-paeUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade kernel-ppc64-develUpgrade kernel-default-extraUpgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade kernel-xen-baseUpgrade kernel-ppc64Upgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-pae-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-trace-develUpgrade kernel-xen-develUpgrade kernel-trace-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.24-29-generic | Nov 8, 2024 | Feb 28, 2011 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380Upgrade VMware ESX 4.0 to build number 787047 | Sep 17, 2012 | Feb 28, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub