Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-pseries64Upgrade kernel-64k-pagesizeUpgrade kernel-smpUpgrade kernel-bigsmpUpgrade kernel-s390xUpgrade kernel-defaultUpgrade kernel-iseries64Upgrade um-host-kernelUpgrade kernel-sn2Upgrade kernel-debugUpgrade um-host-install-initrdUpgrade kernel-symsUpgrade kernel-umUpgrade kernel-pmac64Upgrade kernel-s390Upgrade kernel-source | Feb 17, 2015 | Apr 14, 2005 |
| Ubuntu | — | Upgrade linux-image-2.6.8.1-4-amd64-k8Upgrade linux-patch-debian-2.6.8.1Upgrade linux-image-2.6.8.1-4-power3Upgrade linux-image-2.6.8.1-4-k7Upgrade linux-image-2.6.8.1-4-power3-smpUpgrade linux-image-2.6.8.1-4-386Upgrade linux-image-2.6.8.1-4-power4Upgrade linux-image-2.6.8.1-4-amd64-k8-smp | Nov 8, 2024 | Apr 14, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub