The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.8.1-6-k7Upgrade linux-image-2.6.10-6-mckinleyUpgrade linux-image-2.6.8.1-6-power3Upgrade linux-image-2.6.10-6-powerpcUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-2.6.8.1-6-686Upgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.8.1-6-686-smpUpgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.8.1-6-amd64-k8-smpUpgrade linux-image-2.6.8.1-6-amd64-k8Upgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.8.1-6-k7-smpUpgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.8.1-6-power4-smpUpgrade linux-image-2.6.8.1-6-386 | Nov 8, 2024 | Oct 18, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub