The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a denial of service (system crash) by leveraging the CAP_MAC_ADMIN capability to set a zero-length security context.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-firmwareUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-abi-whitelistsUpgrade perfUpgrade python-perfUpgrade kernel-doc | Dec 1, 2016 | Feb 28, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 28, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Feb 28, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-60-genericUpgrade linux-image-3.5.0-47-highbankUpgrade linux-image-3.11.0-18-generic-lpaeUpgrade linux-image-3.2.0-60-generic-paeUpgrade linux-image-2.6.32-57-ia64Upgrade linux-image-3.2.0-60-omapUpgrade linux-image-2.6.32-57-versatileUpgrade linux-image-2.6.32-57-serverUpgrade linux-image-3.2.0-60-powerpc-smpUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-3.5.0-239-omap4Upgrade linux-image-3.11.0-18-genericUpgrade linux-image-3.2.0-60-powerpc64-smpUpgrade linux-image-3.2.0-60-highbankUpgrade linux-image-3.5.0-47-omapUpgrade linux-image-2.6.32-57-preemptUpgrade linux-image-2.6.32-362-ec2Upgrade linux-image-2.6.32-57-genericUpgrade linux-image-3.2.0-1444-omap4Upgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-3.8.0-37-genericUpgrade linux-image-2.6.32-57-386Upgrade linux-image-3.2.0-60-virtualUpgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-3.5.0-47-genericUpgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-2.6.32-57-virtualUpgrade linux-image-2.6.32-57-lpia | Nov 8, 2024 | Feb 28, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub