The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.10-6-mckinleyUpgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.8.1-6-k7Upgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.8.1-6-power3Upgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-2.6.8.1-6-686-smpUpgrade linux-image-2.6.8.1-6-686Upgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.8.1-6-amd64-k8Upgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.8.1-6-386Upgrade linux-image-2.6.8.1-6-power4-smpUpgrade linux-image-2.6.8.1-6-amd64-k8-smpUpgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.8.1-6-k7-smp | Nov 8, 2024 | Oct 18, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub