The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-firmwareUpgrade kernelUpgrade perfUpgrade python-perf | Dec 1, 2016 | May 17, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 17, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2012 |
| Suse | — | Upgrade kernel-ec2-extra-debuginfoUpgrade kernel-pae-baseUpgrade kernel-rt_trace-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade drbd-kmp-rtUpgrade kernel-ec2-develUpgrade kernel-pae-debuginfoUpgrade kernel-traceUpgrade kernel-source-rtUpgrade kernel-pae-devel-debuginfoUpgrade kernel-debug-base-debuginfoUpgrade kernel-trace-debugsourceUpgrade kernel-ec2-baseUpgrade kernel-debug-debuginfoUpgrade kernel-desktop-debugsourceUpgrade kernel-ec2-extraUpgrade kernel-vanilla-develUpgrade kernel-desktop-base-debuginfoUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-sourceUpgrade kernel-default-base-debuginfoUpgrade kernel-ec2Upgrade kernel-trace-base-debuginfoUpgrade kernel-rtUpgrade kernel-desktop-baseUpgrade kernel-debug-baseUpgrade kernel-default-devel-debuginfoUpgrade kernel-desktop-develUpgrade kernel-xen-base-debuginfoUpgrade kernel-rt_traceUpgrade ocfs2-kmp-rtUpgrade kernel-vanilla-debuginfoUpgrade brocade-bna-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-ec2-debuginfoUpgrade kernel-pae-debugsourceUpgrade cluster-network-kmp-rtUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-xen-baseUpgrade kernel-source-vanillaUpgrade kernel-paeUpgrade kernel-xen-debugsourceUpgrade kernel-desktop-debuginfoUpgrade kernel-rt-baseUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-default-debugsourceUpgrade kernel-pae-develUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-debug-debugsourceUpgrade kernel-vanilla-debugsourceUpgrade kernel-debug-devel-debuginfoUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade cluster-network-kmp-rt_traceUpgrade kernel-trace-debuginfoUpgrade ofed-kmp-rtUpgrade drbd-kmp-rt_traceUpgrade kernel-ec2-debugsourceUpgrade kernel-xen-develUpgrade kernel-vanilla-devel-debuginfoUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-xen-debuginfoUpgrade kernel-rt_trace-develUpgrade kernel-vanilla-baseUpgrade kernel-default-baseUpgrade kernel-desktopUpgrade kernel-vanillaUpgrade kernel-pae-base-debuginfoUpgrade kernel-default-debuginfoUpgrade kernel-trace-devel-debuginfoUpgrade ocfs2-kmp-rt_traceUpgrade kernel-default-develUpgrade iscsitarget-kmp-rtUpgrade kernel-docsUpgrade kernel-ec2-base-debuginfoUpgrade kernel-xen-devel-debuginfoUpgrade kernel-trace-base | Dec 12, 2013 | May 17, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-41-serverUpgrade linux-image-3.2.0-24-powerpc-smpUpgrade linux-image-2.6.32-41-generic-paeUpgrade linux-image-2.6.32-41-ia64Upgrade linux-image-2.6.32-41-sparc64Upgrade linux-image-2.6.32-41-versatileUpgrade linux-image-2.6.32-41-powerpcUpgrade linux-image-3.0.0-1210-omap4Upgrade linux-image-3.2.0-1413-omap4Upgrade linux-image-3.0.0-20-powerpcUpgrade linux-image-2.6.38-15-powerpc-smpUpgrade linux-image-3.0.0-20-omapUpgrade linux-image-3.0.0-20-virtualUpgrade linux-image-3.2.0-24-omapUpgrade linux-image-2.6.38-15-powerpc64-smpUpgrade linux-image-3.0.0-20-serverUpgrade linux-image-2.6.38-15-virtualUpgrade linux-image-2.6.38-15-omapUpgrade linux-image-2.6.38-15-serverUpgrade linux-image-2.6.32-41-sparc64-smpUpgrade linux-image-3.2.0-24-generic-paeUpgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-3.0.0-20-powerpc64-smpUpgrade linux-image-2.6.32-41-powerpc64-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-3.2.0-24-virtualUpgrade linux-image-2.6.32-41-genericUpgrade linux-image-3.2.0-24-genericUpgrade linux-image-3.0.0-20-generic-paeUpgrade linux-image-3.2.0-24-powerpc64-smpUpgrade linux-image-2.6.32-41-lpiaUpgrade linux-image-2.6.32-41-preemptUpgrade linux-image-3.0.0-20-genericUpgrade linux-image-2.6.38-15-powerpcUpgrade linux-image-2.6.38-15-genericUpgrade linux-image-2.6.38-15-versatileUpgrade linux-image-2.6.32-41-virtualUpgrade linux-image-2.6.32-41-386Upgrade linux-image-2.6.32-345-ec2Upgrade linux-image-3.0.0-20-powerpc-smpUpgrade linux-image-2.6.32-41-powerpc-smp | Nov 8, 2024 | May 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub