The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade sys-kernel/planet-ccrma-sources.Upgrade sys-kernel/gs-sources.Upgrade sys-kernel/gentoo-sources.Upgrade sys-kernel/mips-prepatch-sources.Upgrade sys-kernel/compaq-sources.Upgrade sys-kernel/wolk-sources.Upgrade sys-kernel/ppc-sources-dev.Upgrade sys-kernel/sparc-sources.Upgrade sys-kernel/ia64-sources.Upgrade sys-kernel/sparc-dev-sources.Upgrade sys-kernel/development-sources.Upgrade sys-kernel/ppc-sources-crypto.Upgrade sys-kernel/ppc-sources.Upgrade sys-kernel/hppa-dev-sources.Upgrade sys-kernel/mips-sources.Upgrade sys-kernel/vanilla-prepatch-sources.Upgrade sys-kernel/xfs-sources.Upgrade sys-kernel/vanilla-sources.Upgrade sys-kernel/selinux-sources.Upgrade sys-kernel/ck-sources.Upgrade sys-kernel/alpha-sources.Upgrade sys-kernel/gaming-sources.Upgrade sys-kernel/win4lin-sources.Upgrade sys-kernel/mm-sources.Upgrade sys-kernel/hardened-sources.Upgrade sys-kernel/openmosix-sources.Upgrade sys-kernel/gentoo-dev-sources.Upgrade sys-kernel/grsec-sources.Upgrade sys-kernel/aa-sources.Upgrade sys-kernel/hppa-sources.Upgrade sys-kernel/ppc-sources-benh.Upgrade sys-kernel/pac-sources.Upgrade sys-kernel/ppc-development-sources.Upgrade sys-kernel/usermode-sources. | Oct 30, 2017 | Mar 3, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub