The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-docUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-abi-whitelists | Dec 1, 2016 | Jul 9, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 9, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 9, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-zfcpdump | Dec 18, 2015 | Jul 9, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-65-generic-paeUpgrade linux-image-2.6.32-62-powerpc-smpUpgrade linux-image-2.6.32-62-versatileUpgrade linux-image-3.13.0-30-powerpc-smpUpgrade linux-image-3.11.0-24-generic-lpaeUpgrade linux-image-2.6.32-62-serverUpgrade linux-image-2.6.32-62-386Upgrade linux-image-3.2.0-65-highbankUpgrade linux-image-2.6.32-62-virtualUpgrade linux-image-2.6.32-62-powerpcUpgrade linux-image-3.13.0-30-powerpc64-smpUpgrade linux-image-2.6.32-62-generic-paeUpgrade linux-image-3.13.0-30-powerpc-e500Upgrade linux-image-3.13.0-30-generic-lpaeUpgrade linux-image-3.2.0-65-virtualUpgrade linux-image-3.8.0-42-genericUpgrade linux-image-3.13.0-30-genericUpgrade linux-image-2.6.32-62-sparc64Upgrade linux-image-3.2.0-65-omapUpgrade linux-image-3.2.0-65-powerpc-smpUpgrade linux-image-2.6.32-62-sparc64-smpUpgrade linux-image-2.6.32-62-powerpc64-smpUpgrade linux-image-3.2.0-65-genericUpgrade linux-image-3.2.0-1451-omap4Upgrade linux-image-3.13.0-30-powerpc-e500mcUpgrade linux-image-2.6.32-62-genericUpgrade linux-image-3.13.0-30-powerpc64-embUpgrade linux-image-2.6.32-62-preemptUpgrade linux-image-3.5.0-52-genericUpgrade linux-image-2.6.32-62-lpiaUpgrade linux-image-2.6.32-366-ec2Upgrade linux-image-3.2.0-65-powerpc64-smpUpgrade linux-image-3.13.0-30-lowlatencyUpgrade linux-image-3.11.0-24-genericUpgrade linux-image-2.6.32-62-ia64 | Nov 8, 2024 | Jul 9, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub