The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-firmwareUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-devel | Dec 1, 2016 | May 17, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 17, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2012 |
| Suse | — | Upgrade kernel-xen-devel-debuginfoUpgrade kernel-trace-baseUpgrade kernel-default-develUpgrade iscsitarget-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-pae-develUpgrade kernel-xen-debuginfoUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade cluster-network-kmp-rt_traceUpgrade ofed-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-vanilla-devel-debuginfoUpgrade drbd-kmp-rt_traceUpgrade kernel-vanilla-baseUpgrade kernel-pae-base-debuginfoUpgrade kernel-rt_trace-develUpgrade kernel-debugUpgrade kernel-desktop-debuginfoUpgrade kernel-xen-debugsourceUpgrade kernel-xenUpgrade kernel-default-debuginfoUpgrade kernel-vanillaUpgrade kernel-develUpgrade kernel-desktopUpgrade kernel-trace-debuginfoUpgrade kernel-trace-devel-debuginfoUpgrade kernel-debug-devel-debuginfoUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-paeUpgrade kernel-ec2-base-debuginfoUpgrade kernel-symsUpgrade kernel-ec2-debugsourceUpgrade kernel-vanilla-debugsourceUpgrade cluster-network-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-xen-develUpgrade kernel-debug-debugsourceUpgrade kernel-default-debugsourceUpgrade ocfs2-kmp-rt_traceUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-trace-develUpgrade kernel-syms-rtUpgrade kernel-traceUpgrade kernel-trace-base-debuginfoUpgrade kernel-desktop-baseUpgrade drbd-kmp-rtUpgrade kernel-desktop-debugsourceUpgrade kernel-rtUpgrade kernel-vanilla-develUpgrade kernel-pae-devel-debuginfoUpgrade kernel-source-rtUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-ec2-extraUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-desktop-base-debuginfoUpgrade kernel-pae-debugsourceUpgrade kernel-ec2-baseUpgrade kernel-ec2-debuginfoUpgrade ocfs2-kmp-rtUpgrade kernel-desktop-develUpgrade kernel-trace-debugsourceUpgrade kernel-debug-baseUpgrade kernel-debug-base-debuginfoUpgrade kernel-sourceUpgrade brocade-bna-kmp-rtUpgrade kernel-ec2-develUpgrade kernel-vanilla-debuginfoUpgrade kernel-xen-base-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-pae-baseUpgrade kernel-default-devel-debuginfoUpgrade kernel-rt_trace-baseUpgrade kernel-pae-debuginfoUpgrade kernel-default-base-debuginfoUpgrade kernel-ec2Upgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-rt_trace | Dec 12, 2013 | May 17, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-345-ec2Upgrade linux-image-3.0.0-20-genericUpgrade linux-image-3.0.0-20-generic-paeUpgrade linux-image-3.2.0-24-virtualUpgrade linux-image-3.0.0-20-powerpc-smpUpgrade linux-image-3.2.0-24-genericUpgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-15-powerpcUpgrade linux-image-3.2.0-24-generic-paeUpgrade linux-image-2.6.32-41-powerpc-smpUpgrade linux-image-2.6.32-41-386Upgrade linux-image-2.6.38-15-serverUpgrade linux-image-2.6.32-41-preemptUpgrade linux-image-2.6.32-41-genericUpgrade linux-image-2.6.32-41-virtualUpgrade linux-image-2.6.38-15-genericUpgrade linux-image-2.6.32-41-powerpc64-smpUpgrade linux-image-3.0.0-20-powerpc64-smpUpgrade linux-image-2.6.32-41-sparc64-smpUpgrade linux-image-2.6.38-15-versatileUpgrade linux-image-3.2.0-24-powerpc64-smpUpgrade linux-image-2.6.32-41-lpiaUpgrade linux-image-3.0.0-20-powerpcUpgrade linux-image-2.6.32-41-generic-paeUpgrade linux-image-3.2.0-24-powerpc-smpUpgrade linux-image-3.0.0-20-omapUpgrade linux-image-2.6.38-15-omapUpgrade linux-image-2.6.38-15-powerpc-smpUpgrade linux-image-2.6.32-41-ia64Upgrade linux-image-3.2.0-1413-omap4Upgrade linux-image-3.2.0-24-omapUpgrade linux-image-2.6.38-15-powerpc64-smpUpgrade linux-image-3.0.0-20-serverUpgrade linux-image-2.6.32-41-serverUpgrade linux-image-2.6.32-41-sparc64Upgrade linux-image-3.0.0-20-virtualUpgrade linux-image-3.0.0-1210-omap4Upgrade linux-image-2.6.32-41-versatileUpgrade linux-image-2.6.32-41-powerpcUpgrade linux-image-2.6.38-15-virtual | Nov 8, 2024 | May 17, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub