The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-sourceUpgrade kernel-iseries64Upgrade kernel-debugUpgrade um-host-install-initrdUpgrade kernel-sn2Upgrade kernel-smpUpgrade kernel-symsUpgrade kernel-s390Upgrade kernel-pseries64Upgrade kernel-64k-pagesizeUpgrade kernel-s390xUpgrade kernel-bigsmpUpgrade kernel-defaultUpgrade kernel-umUpgrade kernel-pmac64Upgrade um-host-kernel | Feb 17, 2015 | Jan 10, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub